CVE-2022-21586

CVE-2022-21586 is a medium-severity vulnerability affecting Oracle Banking Trade Finance version 14.5, specifically within its Infrastructure component. This flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion, modification, and access to critical or all accessible data within the application. Exploitation requires human interaction from a non-attacker, making it difficult to exploit, as reflected by its CVSS 3.1 score of 6.4. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.