Oracle FLEXCUBE Universal Banking Relationship Pricing Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in the Oracle FLEXCUBE Universal Banking product, specifically within the Relationship Pricing component. This issue affects versions 14.0.0.0.0 through 14.8.0.0.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the application. Exploitation of this vulnerability could lead to unauthorized access to critical data or complete access to all data within Oracle FLEXCUBE Universal Banking that is accessible to the user.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all Oracle FLEXCUBE Universal Banking data that is accessible to the user.