CVE-2018-2670

CVE-2018-2670 is an easily exploitable vulnerability within the User Interface subcomponent of Oracle Financial Services Profitability Management, affecting versions 6.1.x and 8.0.x. An unauthenticated attacker with network access via HTTP can compromise the system, requiring human interaction from a victim. Successful attacks can lead to unauthorized read, update, insert, or delete access to a subset of accessible data within the affected product. The vulnerability has a CVSS 3.0 Base Score of 6.1 (Medium), indicating impacts on Confidentiality and Integrity. Its attack vector is network-based with low attack complexity, but requires user interaction. While the vulnerability is in Oracle Financial Services Profitability Management, attacks may significantly impact additional products. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.