PT-2026-34079 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

CVE-2026-22010

·

Published

2026-04-21

·

Updated

2026-04-26

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 Oracle Financial Services Analytical Applications Infrastructure versions 8.0.8.7 Oracle Financial Services Analytical Applications Infrastructure versions 8.1.2.5
Description An issue in the Platform component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or complete access to all accessible data within the infrastructure.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-08896
CVE-2026-22010

Affected Products

Oracle Financial Services Analytical Applications Infrastructure