The vulnerability of the OBVAM Internal Tfr Domain component of the Oracle Banking Virtual Account Management component in the banking analytics system’s simulation model of Oracle Financial Services Applications allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

🗓️ 12 May 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The OBVAM Internal Transfer Domain in Oracle Banking Virtual Account Management has insufficient input validation, risking service failures and data access.

Reporter	Title	Published	Views	Family All 10
CNNVD	Oracle Financial Services Applications 安全漏洞	18 Apr 202300:00	–	cnnvd
CVE	CVE-2023-21903	18 Apr 202319:54	–	cve
Cvelist	CVE-2023-21903	18 Apr 202319:54	–	cvelist
EUVD	EUVD-2023-26068	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Oracle Financial Services Applications	19 Apr 202300:00	–	ncsc
NVD	CVE-2023-21903	18 Apr 202320:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2023	18 Apr 202300:00	–	oracle
Prion	Buffer overflow	18 Apr 202320:15	–	prion
RedhatCVE	CVE-2023-21903	23 May 202506:06	–	redhatcve
Vulnrichment	CVE-2023-21903	18 Apr 202319:54	–	vulnrichment

Vulners

Node

oracle oracle_banking_virtual_account_managementMatch14.5

oracle oracle_banking_virtual_account_managementMatch14.6

oracle oracle_banking_virtual_account_managementMatch14.7

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2023.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023041893
web	www.web.nvd.nist.gov/view/vuln/detail

12 May 2023 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 35.3

CVSS 26.1

EPSS0.00526