Threats affecting pkg:maven/com.oracle/middleware-common-libraries-tools

CVE-2026-91617 is a vulnerability in Oracle Middleware Common Libraries and Tools, specifically in the Remote Diagnostic Agent component. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low privileged attacker with logon access to the infrastructure to compromise the product, potentially gaining unauthorized access to critical data. The CVSS 3.1 base score is 5.5, indicating a medium severity with a high confidentiality impact but no impact on integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches across multiple products. However, no explicit patch links or fixed versions for this specific vulnerability are provided in the advisory content.

Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Middleware Common Libraries and Tools executes to compromise Oracle Middleware Common Libraries and Tools. Successful attacks of this vulnerability can result in takeover of Oracle Middleware Common Libraries and Tools. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).