Threat Intelligence Database

A critical vulnerability (CVE-2026-82999) exists in the Service Delivery Platform component (Messaging Enabler) of Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Service Delivery Platform, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

A critical vulnerability (CVE-2026-83151) exists in the Service Delivery Platform component of Oracle Fusion Middleware Messaging Enabler. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows an unauthenticated attacker with network access via SOAP to fully compromise the Service Delivery Platform, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.8. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-82999 is a critical vulnerability in Oracle's Service Delivery Platform component of Fusion Middleware Messaging Enabler. It allows a low privileged attacker with network access via HTTP to compromise the platform, potentially leading to full takeover. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. The CVSS 3.1 base score is 9.9, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.

CVE-2026-82998 is a critical vulnerability in Oracle Service Delivery Platform versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via T3 or IIOP protocols to compromise the platform. Successful exploitation can lead to full takeover of the Service Delivery Platform and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

CVE-2026-82997 is a critical vulnerability in Oracle's Service Delivery Platform component of Oracle Fusion Middleware. It allows a low privileged attacker with network access via T3 or IIOP protocols to compromise the Service Delivery Platform. Successful exploitation can lead to full takeover of the platform and potentially impact additional Oracle products. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts.

CVE-2026-60865 is a vulnerability in Oracle Fusion Middleware's Service Delivery Platform, specifically in the Messaging Enabler component. It affects versions 14.1.2.0.0 and 12.2.1.4.0. The flaw allows a high privileged attacker with network access via HTTP to compromise the platform, potentially leading to unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level. The vulnerability's impact scope may extend to additional Oracle products. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update advisory.

CVE-2026-60861 is a critical vulnerability in Oracle Fusion Middleware's Service Delivery Platform (Messaging Enabler component) affecting versions 14.1.2.0.0 and 12.2.1.4.0. It allows a low privileged attacker with network access via Oracle Net to compromise the platform, potentially impacting additional products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by the Service Delivery Platform. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality and integrity impact without availability impact.

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Service Delivery Platform executes to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Service Delivery Platform accessible data as well as unauthorized read access to a subset of Service Delivery Platform accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).