CVE-2023-22123
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-22123 is a vulnerability affecting Oracle Financial Services Applications' Oracle Banking Trade Finance product (Infrastructure component). Affected versions include 14.5-14.7. This issue allows a low-privileged attacker with network access via HTTP to potentially compromise Oracle Banking Trade Finance. Although the impact is initially limited to this product, additional products may also be significantly affected due to scope change. Successful attacks could result in unauthorized data modification (update, insert, or delete) or unauthorized data read access. The CVSS Base Score is 5.4, with Confidentiality and Integrity impacts. Attacks require human interaction and are rated as Low Privilege Required (AV:N), Low Adversary Complexity (AC:L), and Low User Interaction (UI:R).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- BonqDAO
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions