Vulnerability in the Oracle Financial Services Customer Screening product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.1.2.8.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Customer Screening. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Financial Services Customer Screening accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuapr2026.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
27 Apr 2026, 18:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.oracle.com/security-alerts/cpuapr2026.html - Vendor Advisory | |
| First Time |
Oracle financial Services Customer Screening
Oracle |
|
| CPE | cpe:2.3:a:oracle:financial_services_customer_screening:8.1.2.8.0:*:*:*:*:*:*:* |
22 Apr 2026, 14:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-285 |
21 Apr 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-21 21:16
Updated : 2026-04-27 18:08
NVD link : CVE-2026-34320
Mitre link : CVE-2026-34320
CVE.ORG link : CVE-2026-34320
JSON object : View
Products Affected
oracle
- financial_services_customer_screening
CWE
CWE-285
Improper Authorization