CVE-2023-22119

CVSS 3.1 Score 5.9 of 10 (medium)

Details

Published Oct 17, 2023
Updated: Oct 23, 2023

Summary

CVE-2023-22119 is a vulnerability affecting Oracle FLEXCUBE Universal Banking, a component of Oracle Financial Services Applications.Versions 12.3, 12.4, 14.0-14.3, and 14.5-14.7 are susceptible to this issue. A low-privileged attacker with network access can exploit this difficulty-to-exploit vulnerability via HTTP to compromise the system. Successful attacks necessitate human interaction from a non-attacker. The consequences include unauthorized access to critical data, complete access to some data, and a partial denial of service for Oracle FLEXCUBE Universal Banking. The CVSS Base Score is 5.9, with Confidentiality, Integrity, and Availability impacts. The CVSS Vector is (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle FLEXCUBE Universal Banking

Affected Vendors

  • BonqDAO

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-22119 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions