CVE-2026-34314
Unauthorized Data Modification in Oracle Financial Services Platform
Publication date: 2026-04-21
Last updated on: 2026-04-23
Assigner: Oracle
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | financial_services_analytical_applications_infrastructure | 8.0.7.9.0 |
| oracle | financial_services_analytical_applications_infrastructure | 8.0.8.7.0 |
| oracle | financial_services_analytical_applications_infrastructure | 8.1.2.5.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Oracle Financial Services Analytical Applications Infrastructure product, specifically affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. It is a difficult to exploit issue that allows a low privileged attacker with network access via HTTP to compromise the system.
If successfully exploited, the attacker can gain unauthorized capabilities to create, delete, or modify critical data or access all data accessible within the Oracle Financial Services Analytical Applications Infrastructure.
How can this vulnerability impact me? :
The impact of this vulnerability includes unauthorized creation, deletion, or modification of critical data within the affected Oracle Financial Services Analytical Applications Infrastructure.
An attacker could gain complete access to all data accessible by the infrastructure, potentially compromising confidentiality and integrity of sensitive information.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to critical or all accessible data within the Oracle Financial Services Analytical Applications Infrastructure.
Such unauthorized access and data manipulation could potentially lead to non-compliance with data protection regulations and standards like GDPR and HIPAA, which require strict controls over data confidentiality and integrity.
However, the provided information does not explicitly state the impact on compliance with these standards.