The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.

🗓️ 12 May 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Banking Virtual Account Management journal domain has insufficient validation, risking service disruption and data access.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-21904	19 Apr 202300:35	–	circl
CNNVD	Oracle Financial Services Applications 安全漏洞	18 Apr 202300:00	–	cnnvd
CVE	CVE-2023-21904	18 Apr 202319:54	–	cve
Cvelist	CVE-2023-21904	18 Apr 202319:54	–	cvelist
EUVD	EUVD-2023-26069	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Oracle Financial Services Applications	19 Apr 202300:00	–	ncsc
NVD	CVE-2023-21904	18 Apr 202320:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2023	18 Apr 202300:00	–	oracle
OSV	CVE-2023-21904	18 Apr 202320:15	–	osv
Prion	Buffer overflow	18 Apr 202320:15	–	prion

Vulners

Node

oracle oracle_banking_virtual_account_managementMatch14.5

OR

oracle oracle_banking_virtual_account_managementMatch14.6

OR

oracle oracle_banking_virtual_account_managementMatch14.7

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2023.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023041893
web	www.web.nvd.nist.gov/view/vuln/detail

12 May 2023 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 35.3

CVSS 26.1

EPSS0.00526

banking virtual account management journal domain insufficient validation data access service disruption