VDB
OSA-38189960
OSA-38189960
PUBLISHED
CVSS 4.900000095367432 MEDIUM
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Platform (Apache Commons FileUpload)). Supported versions that are affected are 14.5.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Risk Scores
CVSS 3.1
4.900000095367432
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Banking Supply Chain Finance Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Supply Chain Finance Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Adapter for Eclipse RDF4J Version 3.12.0 | Oracle Adapter for Eclipse RDF4J Version 3.12.0 |
| Oracle | Oracle Banking Collections and Recovery Version 14.6.0.0.0-14.8.0.0.0 | Oracle Banking Collections and Recovery Version 14.6.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Virtual Account Management(Core) Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management(Core) Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle FLEXCUBE Enterprise Limits and Collateral Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle FLEXCUBE Enterprise Limits and Collateral Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Network Repository Function(Signaling) Version 25.1.204 | Oracle Communications Cloud Native Core Network Repository Function(Signaling) Version 25.1.204 |
| Oracle | Oracle Banking Credit Facilities Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Credit Facilities Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Trade Finance Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Virtual Account Management(Platform) Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management(Platform) Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1 | Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1 |
Timeline
- Apr 24, 2026 CVE Published