CVE-2021-35687 in Financial Services Analytical Applications Infrastructureinformazioni

Riassunto

di MITRE • 19/01/2022

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsabile

Oracle

Prenotare

28/06/2021

Divulgazione

19/01/2022

Moderazione

accettato

CPE

pronto

EPSS

0.01147

KEV

no

Attività

molto basso

Fonti

Want to know what is going to be exploited?

We predict KEV entries!