Threats affecting pkg:maven/com.oracle/configurator

CVE-2026-34274 is a vulnerability in Oracle Configurator versions 12.2.3 through 12.2.15 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a person other than the attacker and can lead to unauthorized read and write access to some Oracle Configurator accessible data. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity, with impacts on confidentiality and integrity but no impact on availability. The vulnerability also has scope change potential, meaning it may affect additional products beyond Oracle Configurator.