Threat Intelligence Database

CVE-2026-83000 is a critical vulnerability in Oracle Service Delivery Platform versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the platform, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes targeted security fixes for affected products. Customers are strongly advised to apply the relevant patches promptly to mitigate risk.

CVE-2026-60866 is a vulnerability in Oracle Fusion Middleware's Service Delivery Platform (Messaging Enabler component) version 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, insert, update, or delete operations on some accessible data within the platform. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level with impacts on confidentiality and integrity but no impact on availability.

CVE-2026-60860 is a high-severity vulnerability in Oracle Fusion Middleware's Service Delivery Platform (Messaging Enabler component). It allows an unauthenticated attacker with network access via TCP to compromise the platform. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and cause denial of service through hangs or crashes. The vulnerability affects versions 14.1.2.0.0 and 12.2.1.4.0. The CVSS 3.1 base score is 8.7, indicating high impact on integrity and availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly.

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).