Multiple critical vulnerabilities in Oracle Financial Services Applications allow remote, anonymous or authenticated attackers to compromise confidentiality, integrity, and availability. The CVSS base score for these vulnerabilities is 9.8 (Critical). Affected versions include numerous specific releases, such as 8.0.8, 8.1.2.5, 8.1.2.7, 8.1.2.9, and ranges including <=14.8.0.0.0, <=13.0.2, and <=14.12.0.0.0. A mitigation is available, though specific patch versions are not detailed in the provided text.
[WID-SEC-2026-1204] Oracle Financial Services Applications: Mehrere Schwachstellen CVSS Base Score 9.8 (kritisch) CVSS Temporal Score 8.5 (hoch) Remoteangriff ja Datum 21.04.2026 Stand 22.04.2026 Mitigation ja Betroffene Systeme Betriebssystem Linux UNIX Windows Produktbeschreibung Oracle Financial Services ist eine Zusammenstellung von Anwendungen für den Finanzsektor und eine Technologiebasis zur Erfüllung von IT- und Geschäftsanforderungen. Produkte 21.04.2026 Oracle Financial Services Applications 8.0.8 Oracle Financial Services Applications 8.0.8.1 Oracle Financial Services Applications 8.0.8.2 Oracle Financial Services Applications 8.1.2.5 Oracle Financial Services Applications 8.1.2.7 Oracle Financial Services Applications 8.1.2.9 Oracle Financial Services Applications 8.0.7.9 Oracle Financial Services Applications 8.0.8.7 Oracle Financial Services Applications <=14.8.0.0.0 Oracle Financial Services Applications 8.1.2.10 Oracle Financial Services Applications 14.8.1.0.0 Oracle Financial Services Applications 1.0.2.1 Oracle Financial Services Applications 8.1.2.11 Oracle Financial Services Applications 14.8.2.0.0 Oracle Financial Services Applications 8.1.2.8.0 Oracle Financial Services Applications <=13.0.2 Oracle Financial Services Applications <=14.12.0.0.0 Oracle Financial Services Applications 11.3.1.0 Oracle Financial Services Applications 11.3.2.0 Oracle Financial Services Applications 12.0.5.0 Oracle Financial Services Applications 12.1.1.0 Angriff Angriff Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden. CVE Informationen Versionshistorie Feedback zum Advisory geben