This vulnerability affects Oracle Data Integrator version 14.1.2.0.0, specifically in the Rest Service component. It is easily exploitable by unauthenticated attackers over HTTPS, enabling them to compromise the system fully. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects that the attack requires no privileges or user interaction and can lead to complete confidentiality, integrity, and availability loss. The vendor advisory is part of Oracle's July 2026 Critical Patch Update, which addresses numerous vulnerabilities across Oracle products, including Oracle Data Integrator. However, the advisory text does not explicitly confirm whether a patch for this specific vulnerability and version is available or not.

Successful exploitation of this vulnerability can lead to full takeover of Oracle Data Integrator 14.1.2.0.0, compromising confidentiality, integrity, and availability of the affected system. This can result in unauthorized access, data manipulation, and service disruption.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. Customers are strongly advised to review the advisory at https://www.oracle.com/security-alerts/cpujul2026.html and apply all relevant patches promptly. Since explicit patch availability for version 14.1.2.0.0 is not confirmed in the provided data, users should verify patch status directly with Oracle support or official resources. Maintaining up-to-date software versions and applying Oracle Critical Patch Updates without delay is recommended to mitigate this vulnerability.