VDB
OSA-38517466
OSA-38517466
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Common Core (Spring Framework)). Supported versions that are affected are 14.5.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Communications Unified Assurance Version 6.1.1-7.0.0 | Oracle Communications Unified Assurance Version 6.1.1-7.0.0 |
| Oracle | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Banking Branch Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Branch Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Documaker Version 12.7.2-13.0.2 | Oracle Documaker Version 12.7.2-13.0.2 |
| Oracle | Oracle Banking Corporate Lending Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Corporate Lending Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 25.1.200 | Oracle Communications Cloud Native Core Security Edge Protection Proxy Version 25.1.200 |
| Oracle | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 | Oracle Banking Origination Version 14.6.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1 | Oracle Communications Cloud Native Core Network Exposure Function Version 24.2.1 |
| Oracle | Oracle WebCenter Forms Recognition Version 14.1.1.0.0 | Oracle WebCenter Forms Recognition Version 14.1.1.0.0 |
| Oracle | Oracle Banking Trade Finance Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Trade Finance Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Enterprise Manager for Fusion Middleware(Infrastructure Management) Version 24.1 | Oracle Enterprise Manager for Fusion Middleware(Infrastructure Management) Version 24.1 |
| Oracle | Oracle Banking Cash Management Version 14.8.2.0.0 | Oracle Banking Cash Management Version 14.8.2.0.0 |
| Oracle | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Corporate Lending Process Management Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle Enterprise Manager for Fusion Middleware(Infrastructure Management) Version 13.5 | Oracle Enterprise Manager for Fusion Middleware(Infrastructure Management) Version 13.5 |
Timeline
- Apr 24, 2026 CVE Published