Threats affecting pkg:maven/com.oracle.fmw/ServiceDeliveryPlatform-MessagingEnabler

A critical vulnerability (CVE-2026-82998) exists in the Service Delivery Platform component Messaging Enabler of Oracle Fusion Middleware. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The flaw allows a low-privileged attacker with network access via T3 or IIOP protocols to compromise the Service Delivery Platform, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.

A critical vulnerability exists in the Service Delivery Platform component of Oracle Fusion Middleware Messaging Enabler, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low-privileged attacker with network access via T3 or IIOP protocols to compromise the Service Delivery Platform, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this issue in their September 2026 Critical Security Patch Update.