Threats affecting pkg:maven/com.oracle/financial-services-customer-screening

CVE-2026-34320 is a high-severity vulnerability in Oracle Financial Services Customer Screening version 8.1.2.8.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability affects the User Interface component and has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction. Oracle has published a Critical Patch Update advisory for April 2026 covering multiple vulnerabilities but does not explicitly confirm a patch for this specific CVE in the provided advisory content.