VDB
OSA-37260019
OSA-37260019
PUBLISHED
Vulnerability in the Oracle Financial Services Model Management and Governance product of Oracle Financial Services Applications (component: Installer (Spring Framework)). The supported version that is affected is 8.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Model Management and Governance. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Model Management and Governance accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Identity Manager Version 12.2.1.4.0 | Oracle Identity Manager Version 12.2.1.4.0 |
| Oracle | Enterprise Manager for MySQL Database Version 13.5.2.0.0 | Enterprise Manager for MySQL Database Version 13.5.2.0.0, Enterprise Manager for MySQL Database Version 13.5.2.0.0 |
| Oracle | Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Version 8.0.8 | Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Version 8.0.8, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition Version 8.0.8 |
| Oracle | Oracle Financial Services Behavior Detection Platform Version 8.1.2.7 | Oracle Financial Services Behavior Detection Platform Version 8.1.2.7, Oracle Financial Services Behavior Detection Platform Version 8.1.2.7 |
| Oracle | Oracle Financial Services Analytical Applications Infrastructure Version 8.0.8.6 | Oracle Financial Services Analytical Applications Infrastructure Version 8.0.8.6, Oracle Financial Services Analytical Applications Infrastructure Version 8.0.8.6 |
| Oracle | Oracle Financial Services Behavior Detection Platform Version 8.1.2.8 | Oracle Financial Services Behavior Detection Platform Version 8.1.2.8, Oracle Financial Services Behavior Detection Platform Version 8.1.2.8 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0, Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0 |
| Oracle | Oracle Financial Services Analytical Applications Infrastructure Version 8.1.2.5 | Oracle Financial Services Analytical Applications Infrastructure Version 8.1.2.5, Oracle Financial Services Analytical Applications Infrastructure Version 8.1.2.5 |
| Oracle | Oracle Retail Integration Bus Version 15.0.3.1 | Oracle Retail Integration Bus Version 15.0.3.1 |
| Oracle | Oracle Financial Services Analytical Applications Infrastructure Version 8.0.7.8 | Oracle Financial Services Analytical Applications Infrastructure Version 8.0.7.8, Oracle Financial Services Analytical Applications Infrastructure Version 8.0.7.8 |
| Oracle | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2, Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 |
| Oracle | Oracle Financial Services Model Management and Governance Version 8.1.3.0 | Oracle Financial Services Model Management and Governance Version 8.1.3.0, Oracle Financial Services Model Management and Governance Version 8.1.3.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.2 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.2, Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.2 |
| Oracle | Oracle Retail Integration Bus Version 16.0.3.0 | Oracle Retail Integration Bus Version 16.0.3.0 |
| Oracle | Oracle Financial Services Compliance Studio Version 8.1.2.6 | Oracle Financial Services Compliance Studio Version 8.1.2.6, Oracle Financial Services Compliance Studio Version 8.1.2.6 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.1 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.1, Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.1 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1, Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1 |
| Oracle | Oracle Retail Integration Bus Version 14.1.3.2 | Oracle Retail Integration Bus Version 14.1.3.2 |
| Oracle | Oracle Communications Cloud Native Core Unified Data Repository Version 24.3.0 | Oracle Communications Cloud Native Core Unified Data Repository Version 24.3.0, Oracle Communications Cloud Native Core Unified Data Repository Version 24.3.0 |
| Oracle | Oracle Retail Integration Bus Version 19.0.1.0 | Oracle Retail Integration Bus Version 19.0.1.0 |
…and 12 more
Timeline
- Feb 11, 2025 CVE Published