Threats tagged 'ghsa-626f-fgrg-h7wp'

A critical vulnerability exists in the Service Delivery Platform component of Oracle Fusion Middleware Messaging Enabler, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low-privileged attacker with network access via T3 or IIOP protocols to compromise the Service Delivery Platform, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this issue in their September 2026 Critical Security Patch Update.