CVE-2026-34313
Unauthorized Access via Network in Oracle Financial Services Platform
Publication date: 2026-04-21
Last updated on: 2026-04-23
Assigner: Oracle
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | financial_services_analytical_applications_infrastructure | 8.0.7.9.0 |
| oracle | financial_services_analytical_applications_infrastructure | 8.0.8.7.0 |
| oracle | financial_services_analytical_applications_infrastructure | 8.1.2.5.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows unauthorized access to critical data or complete access to all data accessible through the Oracle Financial Services Analytical Applications Infrastructure. Such unauthorized access to sensitive or critical data can lead to non-compliance with data protection regulations and standards such as GDPR and HIPAA, which require strict controls to protect personal and sensitive information.
Because the vulnerability impacts confidentiality by enabling unauthorized data access, organizations using affected versions may face increased risk of data breaches, potentially violating regulatory requirements for data privacy and security.
Can you explain this vulnerability to me?
This vulnerability exists in the Oracle Financial Services Analytical Applications Infrastructure product, specifically affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. It allows a low privileged attacker with network access via HTTP to exploit the system easily.
Successful exploitation can lead to unauthorized access to critical data or even complete access to all data accessible through the Oracle Financial Services Analytical Applications Infrastructure.
How can this vulnerability impact me? :
The impact of this vulnerability is primarily on confidentiality. An attacker with low privileges and network access can gain unauthorized access to sensitive or critical data within the Oracle Financial Services Analytical Applications Infrastructure.
This could result in exposure of confidential information, potentially leading to data breaches or misuse of sensitive financial data.