OSA-37366309
Vulnerability in the Oracle Financial Services Compliance Studio product of Oracle Financial Services Applications (component: Reports (Spring Security)). The supported version that is affected is 8.1.2.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Compliance Studio. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Compliance Studio accessible data as well as unauthorized read access to a subset of Oracle Financial Services Compliance Studio accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 | Oracle Communications Cloud Native Core Policy Version 24.2.0-24.2.2 |
| Oracle | Oracle Communications Unified Inventory Management Version 7.4.2 | Oracle Communications Unified Inventory Management Version 7.4.2 |
| Oracle | Oracle Business Intelligence Enterprise Edition Version 12.2.1.4.0 | Oracle Business Intelligence Enterprise Edition Version 12.2.1.4.0 |
| Oracle | Oracle Business Intelligence Enterprise Edition Version 7.0.0.0.0 | Oracle Business Intelligence Enterprise Edition Version 7.0.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.0 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.0, Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 24.2.0 |
| Oracle | Oracle Communications Unified Inventory Management Version 7.4.1 | Oracle Communications Unified Inventory Management Version 7.4.1 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.0 |
| Oracle | Oracle Business Intelligence Enterprise Edition Version 7.6.0.0.0 | Oracle Business Intelligence Enterprise Edition Version 7.6.0.0.0 |
| Oracle | Oracle Financial Services Compliance Studio Version 8.1.2.6 | Oracle Financial Services Compliance Studio Version 8.1.2.6 |
| Oracle | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1 | Oracle Communications Cloud Native Core Binding Support Function Version 24.2.1 |
Timeline
- Feb 11, 2025 CVE Published