This vulnerability affects Oracle Reports Developer version 12.2.1.19.0 and is classified under Oracle Fusion Middleware's Security and Authentication component. An unauthenticated attacker who can access the physical communication segment attached to the hardware where Oracle Reports Developer runs can exploit this flaw to compromise the software. The CVSS 3.1 vector indicates the attack requires adjacent network access (AV:A), low complexity (AC:L), no privileges (PR:N), no user interaction (UI:N), and impacts confidentiality, integrity, and availability (C:H/I:H/A:H). Oracle has addressed this vulnerability in its August 2026 Critical Security Patch Update advisory.

Successful exploitation of this vulnerability can lead to complete compromise of Oracle Reports Developer, affecting confidentiality, integrity, and availability of the system. This could allow attackers to take over the affected software, potentially leading to unauthorized access and control over the Oracle Reports Developer environment.

Oracle has released security patches for this vulnerability as part of the August 2026 Critical Security Patch Update. Customers should apply the relevant patches without delay to mitigate the risk. Oracle strongly recommends remaining on actively-supported versions and promptly applying all security patches. No additional mitigation steps are specified beyond patching.