CVE-2025-21550
First published: Tue Jan 21 2025(Updated: )
Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affected are 8.0.8.1, 8.1.2.7 and 8.1.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Behavior Detection Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Behavior Detection Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Behavior Detection Platform accessible data as well as unauthorized read access to a subset of Oracle Financial Services Behavior Detection Platform accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Financial Services Behavior Detection Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-21550?
CVE-2025-21550 has been classified as an easily exploitable vulnerability, allowing for significant security risks in affected versions.
How do I fix CVE-2025-21550?
To fix CVE-2025-21550, users should apply the latest security patches provided by Oracle for affected versions of the Financial Services Behavior Detection Platform.
Which versions are affected by CVE-2025-21550?
CVE-2025-21550 affects Oracle Financial Services Behavior Detection Platform versions 8.0.8.1, 8.1.2.7, and 8.1.2.8.
Who can exploit CVE-2025-21550?
CVE-2025-21550 can be exploited by unauthenticated attackers with network access to the affected systems.
What component is vulnerable in CVE-2025-21550?
The vulnerable component in CVE-2025-21550 is the Web UI of the Oracle Financial Services Behavior Detection Platform.
- agent/references
- agent/first-publish-date
- agent/type
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/source
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle financial services behavior detection platform