CVE-2026-35231

CVE-2026-35231 is a vulnerability in Oracle Financial Services Transaction Filtering (version 8.1.2.8.0) that resides in the User Interface component of Oracle Financial Services Applications. This vulnerability allows unauthenticated attackers with network access to exploit the system via HTTP, resulting in unauthorized disclosure of critical data or complete access to all accessible data within the application. The vulnerability presents a high-severity risk with a CVSS 3.1 score of 7.5. The attack vector is network-based with low complexity, requiring no authentication or user interaction. The exploit is easily exploitable, though impacts are limited to confidentiality concerns with no integrity or availability degradation. The vulnerability poses a significant risk to the confidentiality of sensitive financial data. Currently, CVE-2026-35231 shows minimal exploitation activity. It does not appear on the Known Exploited Vulnerabilities catalog, and the EPSS score of 0.000320 indicates very low probability of active exploitation. Community attention remains low as indicated by the inactive Hot List status, though the FAUCET Risk Score of 48.0 suggests moderate overall risk requiring attention from affected organizations.