Lucene search

OracleCVE-2023-21902

HistoryApr 18, 2023 - 8:15 p.m.

CVE-2023-21902

2023-04-1820:15:11

oracle

web.nvd.nist.gov

cve-2023-21902

oracle

financial services

behavior detection

platform

vulnerability

security

access

http

cvss

nvd

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Application). The supported version that is affected is 8.0.8.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Behavior Detection Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Behavior Detection Platform accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected configurations

Nvd

Vulners

Node

oraclefinancial_services_behavior_detection_platformMatch8.0.8.1

VendorProductVersionCPE
oraclefinancial_services_behavior_detection_platform8.0.8.1cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	financial_services_behavior_detection_platform	8.0.8.1	cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8.1:::::::*

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "Financial Services Behavior Detection Platform",
    "versions": [
      {
        "version": "8.0.8.1",
        "status": "affected"
      }
    ]
  }
]

References

www.oracle.com/security-alerts/cpuapr2023.html

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

Related for CVE-2023-21902