CVE-2023-21902: Medium severity oracle financial services behavior detection platform vulnerability

Published Apr 18, 2023

Updated

Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Application). The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Behavior Detection Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Behavior Detection Platform accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected Software

1 affected component

Oracle Financial Services Behavior Detection Platform=8.0.8.1

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2023.html

Event History

Apr 18, 2023

CVE Published

via MITRE·07:54 PM

Data Sourced

via MITRE·07:54 PM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-21902.

What is the affected version of Oracle Financial Services Behavior Detection Platform?

The affected version of Oracle Financial Services Behavior Detection Platform is 8.0.8.1.

What is the severity of CVE-2023-21902?

The severity of CVE-2023-21902 is medium with a severity value of 4.3.

How can the vulnerability be exploited?

The vulnerability can be exploited by a low privileged attacker with network access via HTTP.

Where can I find more information about this vulnerability?

You can find more information about this vulnerability at the following link: https://www.oracle.com/security-alerts/cpuapr2023.html