GSD-2023-21915 | Vulnetix

GSD-2023-21915 PUBLISHED CVSS 4.599999904632568 MEDIUM

Record from circl · Published April 21, 2026

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer). Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).

Risk scores

CVSS 3.1

4.599999904632568

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Affected products

Vendor	Product	Versions
Oracle Corporation	Banking Payments	14.5, 14.7, 14.6

Timeline

Apr 21, 2026 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GSD-2023-21915
vulnetix vdb fixes GSD-2023-21915

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GSD-2023-21915/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle Advisory vendor-advisory

Look up in the Resolve Platform →