Oracle FLEXCUBE Investor Servicing Security Management System Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in the Oracle FLEXCUBE Investor Servicing product within the Security Management System component. Affected versions include 14.5.0.15.0, 14.7.0.8.0, and 14.8.0.1.0. This vulnerability allows low-privileged attackers with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Exploitation of this vulnerability could lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to essential data or complete access to all data available in Oracle FLEXCUBE Investor Servicing.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all data within Oracle FLEXCUBE Investor Servicing, as well as unauthorized creation, deletion, or modification of critical data or all accessible data in the application.