← Back

CVE-2026-60442

nvd nist
Published: Jul 21, 2026Modified: Aug 4, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected (1)

Oracle
1 product
Service Delivery Platform
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Service Delivery Platform
All versions
Running on/withPlatform Versions
Oracle
Fusion Middleware
Version 12.2.1.4.0
Oracle
Fusion Middleware
Version 14.1.2.0.0

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.