Vulnerability in Oracle Flexcube_universal_banking
CVE-2022-21544
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1-12.4, 14.0-14.3 and 14.5. Difficult to exploit vulnerabilit…
EPSS: 0.007 (47.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Oracle Flexcube_universal_banking — versions 14.5.0
- Oracle Corporation Flexcube Universal Banking — versions 12.1-12.4, 14.0-14.3, 14.5
References
- secalert_us@oracle.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-21544?
- CVE-2022-21544 is a high-severity vulnerability in Oracle Flexcube_universal_banking. CVSS score: 7.1/10. Published 2022-07-19.
- How severe is CVE-2022-21544?
- High severity. CVSS v3 base score is 7.1 out of 10.