CVE-2026-60865
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
Vulnerability in Service Delivery Platform (component: Messaging Enabler) affects versions 14.1.2.0.0 and 12.2.1.4.0. It is easily exploitable by a high-privileged attacker via HTTP, allowing unauthorized access to critical data or full access to data. Attacks may impact additional products.
Risk Assessment
Risk of confidentiality breach of critical data in Service Delivery Platform, potentially leading to sensitive information disclosure and impact on other systems.
Recommendation
Apply Oracle patches for versions 14.1.2.0.0 and 12.2.1.4.0, and restrict access to the platform to trusted administrators only.
Original NVD description (English source)
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Service Delivery Platform accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).