VDB
OSA-38696033
OSA-38696033
PUBLISHED
CVSS 5.900000095367432 MEDIUM
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Common Core (Spring Framework)). Supported versions that are affected are 14.5.0.0.0-14.8.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Enterprise Command Center Framework Version 15.0 | Oracle Enterprise Command Center Framework Version 15.0, Oracle Enterprise Command Center Framework Version 15.0 |
| Oracle | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0, Oracle Banking Virtual Account Management Version 14.5.0.0.0-14.8.0.0.0 |
Timeline
- Apr 24, 2026 CVE Published