CVE-2026-34310
Received Received - Intake
Unauthorized Access via Network in Oracle Financial Services Platform

Publication date: 2026-04-21

Last updated on: 2026-04-24

Assigner: Oracle

Description
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-21
Last Modified
2026-04-24
Generated
2026-06-16
AI Q&A
2026-04-22
EPSS Evaluated
2026-06-15
NVD
CVE-2026-34310
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
oracle financial_services_analytical_applications_infrastructure 8.0.7.9.0
oracle financial_services_analytical_applications_infrastructure 8.0.8.7.0
oracle financial_services_analytical_applications_infrastructure 8.1.2.5.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Oracle Financial Services Analytical Applications Infrastructure product, specifically affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. It is an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the system.

Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible within the Oracle Financial Services Analytical Applications Infrastructure.

Impact Analysis

The impact of this vulnerability is significant because it allows an attacker to gain unauthorized access to sensitive or critical data within the Oracle Financial Services Analytical Applications Infrastructure.

Since the vulnerability can be exploited without authentication and remotely over the network, it poses a high risk of data breach or exposure of confidential information.

Compliance Impact

This vulnerability allows an unauthenticated attacker with network access to gain unauthorized access to critical data or complete access to all accessible data within the Oracle Financial Services Analytical Applications Infrastructure. Such unauthorized access to sensitive or critical data can lead to violations of data protection regulations and standards such as GDPR and HIPAA, which mandate strict controls over access to personal and sensitive information.

Therefore, exploitation of this vulnerability could result in non-compliance with these regulations due to potential data breaches and unauthorized data exposure.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-34310. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart