Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
History

Tue, 24 Sep 2024 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2022-01-19T11:21:46

Updated: 2024-09-24T20:33:15.083Z

Reserved: 2021-06-28T00:00:00

Link: CVE-2021-35686

cve-icon Vulnrichment

Updated: 2024-08-04T00:40:47.450Z

cve-icon NVD

Status : Modified

Published: 2022-01-19T12:15:09.830

Modified: 2024-11-21T06:12:46.677

Link: CVE-2021-35686

cve-icon Redhat

No data.