CVE-2026-34321: Medium severity Oracle Oracle Financial Services Analytical Applications Infrastructure vulnerability
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34321?
The severity of CVE-2026-34321 is medium with a score of 4.8.
How do I fix CVE-2026-34321?
To mitigate CVE-2026-34321, users should update to the latest supported version of Oracle Financial Services Analytical Applications Infrastructure.
What versions are affected by CVE-2026-34321?
CVE-2026-34321 affects versions 8.0.7.9, 8.0.8.7, and 8.1.2.5 of Oracle Financial Services Analytical Applications Infrastructure.
What component is impacted in CVE-2026-34321?
CVE-2026-34321 impacts the User Interface component of Oracle Financial Services Analytical Applications Infrastructure.
What type of attackers can exploit CVE-2026-34321?
CVE-2026-34321 can be exploited by low privileged attackers due to its difficult exploit nature.