PT-2026-34146 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Published 2026-04-21 · Updated 2026-04-26 · CVE-2026-34325

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9, 8.0.8.7 and 8.1.2.5

Description An issue in the User Interface component allows a low privileged attacker with logon access to the infrastructure to compromise the system. This exploit requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access, update, insertion, or deletion of critical data, as well as the ability to cause a hang or repeatable crash, resulting in a complete denial of service (DOS), which is a state where the system becomes unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-34325

Affected Products

Oracle Financial Services Analytical Applications Infrastructure

References · 3

• https://oracle.com/security-alerts/cpuapr2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34325 · Security Note
• https://twitter.com/CVEnew/status/2048546619986231595 · Twitter Post