Threats tagged 'ghsa-2p25-gpmw-fxqq'

A critical vulnerability (CVE-2026-82999) exists in the Service Delivery Platform component (Messaging Enabler) of Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low-privileged attacker with network access via HTTP to compromise the Service Delivery Platform, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.