VDB
OSA-38884555
OSA-38884555
PUBLISHED
CVSS 6.5 MEDIUM
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Infrastructure (Netty)). The supported version that is affected is 14.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking Liquidity Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Liquidity Management accessible data as well as unauthorized read access to a subset of Oracle Banking Liquidity Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle GoldenGate Big Data and Application Adapters(AWS SDK) Version 23.4-23.10 | Oracle GoldenGate Big Data and Application Adapters(AWS SDK) Version 23.4-23.10 |
| Oracle | Oracle Banking Liquidity Management Version 14.8.1.0.0 | Oracle Banking Liquidity Management Version 14.8.1.0.0 |
| Oracle | Oracle GoldenGate Big Data and Application Adapters(Java Delivery) Version 21.3-21.20 | Oracle GoldenGate Big Data and Application Adapters(Java Delivery) Version 21.3-21.20 |
| Oracle | Oracle GoldenGate Big Data and Application Adapters(Java Delivery) Version 23.4-23.10 | Oracle GoldenGate Big Data and Application Adapters(Java Delivery) Version 23.4-23.10 |
Timeline
- Apr 24, 2026 CVE Published