Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2026-101380 Vulnerability in Oracle REST Data Services (component: ADP)

Description

Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle REST Data Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle REST Data Services accessible data as well as unauthorized read access to a subset of Oracle REST Data Services accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
Oracle REST Data Services 24.2 24.2.0 → 26.1.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Oracle REST Data Services

Les 43 CVE de Oracle REST Data Services →
CVE-2026-91610 Vulnerability in Oracle REST Data Services (component: General) 8.8 Élevée CVE-2026-91609 Vulnerability in Oracle REST Data Services (component: Graph QL) 6.5 Moyenne CVE-2026-101494 Vulnerability in Oracle REST Data Services (component: Core) 7.7 Élevée CVE-2026-101493 Vulnerability in Oracle REST Data Services (component: Core) 5.4 Moyenne
Suivre cette CVE