CVE-2023-21907
First published: Tue Apr 18 2023(Updated: )
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Banking Virtual Account Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Banking Virtual Account Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Banking Virtual Account Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Banking Virtual Account Management. CVSS 3.1 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:H).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Banking Virtual Account Management | =14.5 | |
| Oracle Banking Virtual Account Management | =14.6 | |
| Oracle Banking Virtual Account Management | =14.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Oracle Banking Virtual Account Management vulnerability?
The vulnerability ID for this Oracle Banking Virtual Account Management vulnerability is CVE-2023-21907.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Oracle Banking Virtual Account Management version 14.5, 14.6, and 14.7.
What is the severity of CVE-2023-21907?
CVE-2023-21907 has a severity rating of medium.
How do I exploit this vulnerability?
Exploiting this vulnerability requires a high privileged attacker with network access, it is difficult to exploit.
How can I fix CVE-2023-21907?
To fix CVE-2023-21907, it is recommended to apply the security patches provided by Oracle Financial Services.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/references
- agent/remedy
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/oracle
- canonical/oracle banking virtual account management
- version/oracle banking virtual account management/14.5
- version/oracle banking virtual account management/14.6
- version/oracle banking virtual account management/14.7