CVE-2023-21905

The CVE-2023-21905 entry affects Oracle Banking Virtual Account Management (Routing Hub) in Oracle Financial Services Applications, specifically versions 14.5–14.7. A root cause of the vulnerability is insufficient input validation in the Routing Hub subcomponent, which enables a high-privilege a...

CVE-2023-21907

CVE-2023-21907 affects Oracle Banking Virtual Account Management (OBVAM Trn Journal Domain) in Oracle Financial Services Applications, specifically versions 14.5–14.7. The issue is a input validation weakness that can be exploited by a high-privilege attacker with network access over HTTP to obta...

CVE-2023-21906

CVE-2023-21906 affects Oracle Banking Virtual Account Management (SMS Module) in Oracle Financial Services Applications. Affected versions: 14.5, 14.6, 14.7. An attacker with network access via HTTP and high privileges can exploit this vulnerability, with user interaction required, to perform una...

CVE-2023-21904

CVE-2023-21904 affects Oracle Financial Services Applications, specifically the Oracle Banking Virtual Account Management (OBVAM) Trn Journal Domain. Affected versions: 14.5, 14.6, 14.7. The issue is exploitable by a high-privilege attacker with network access via HTTP and requires user interacti...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the OBVAM Internal Tfr Domain component of Oracle Financial Services Applications versions...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in Oracle Financial Services Behavior Detection Platform version 8.0.8.1 for Oracle Financial...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the OBVAM Trn Journal Domain component of Oracle Financial Services Applications versions...

CVE-2022-21586

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21544

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

Design/Logic Flaw

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HT...

CVE-2022-21586

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21586

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21586

CVE-2022-21586 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, specifically version 14.5. The issue is exploitable with network access via HTTP by a low-privilege attacker and requires user interaction; successful attacks can lead to unauthorized c...

CVE-2022-21584

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21581

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

CVE-2022-21581

CVE-2022-21581 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, version 14.5. The vulnerability can be triggered by a low-privilege user with network access via HTTP, and exploitation requires user interaction. Successful attacks may lead to unautho...

CVE-2022-21579

CVE-2022-21579 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.1–12.4, 14.0–14.3 and 14.5. The issue is exploitable by a low-privilege attacker over HTTP with network access, requiring user interaction; impact includes unauthorized creation/deletion/modificati...

CVE-2022-21579

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2022-21578

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...

CVE-2022-21577

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTT...