CVE-2026-34313

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (User Interface component) in versions 8.0.7.9, 8.0.8.7, and 8.1.2.5 allows a low-privileged local attacker, with user interaction, to gain unauthorized access to data, modify it, and cause a hang or repeatable crash (DoS).

A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (User Interface component) versions 8.0.7.9, 8.0.8.7, and 8.1.2.5 allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data. The attack requires human interaction from a person other than the attacker. CVSS 3.1 Base Score 4.8 (confidentiality impact).

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product (component: Platform) affecting versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the system, resulting in unauthorized creation, deletion, or modification access to critical data and unauthorized access to critical data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: System Configuration) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS).

Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An authenticated low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to data.

Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform). Affected versions are 8.0.7.9, 8.0.8.7, and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Attacks may significantly impact additional products (scope change). Successful attacks can result in unauthorized access to critical data or complete access to all accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts).

Vulnerability in Oracle Financial Services Analytical Applications Infrastructure (component: Platform) affecting versions 8.0.7.9, 8.0.8.7 and 8.1.2.5. An easily exploitable vulnerability allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all accessible data.

A vulnerability in Oracle Financial Services Analytical Applications Infrastructure (part of Oracle Financial Services Applications) in the Platform component. Affects versions 8.0.7.9, 8.0.8.7, and 8.1.2.5. An unauthenticated attacker can access via HTTP, requiring user interaction, and gain unauthorized read and modify access to some data.