9.8
Critique
CVE-2026-91233 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System)
Description
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in takeover of Oracle SOA Suite. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle SOA Suite | 14.1.2.0.0 | Pas de correctif indiqué |
| Oracle SOA Suite | 12.2.1.4.0 | Pas de correctif indiqué |
Références
- Oracle Advisory www.oracle.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Oracle SOA Suite
Les 36 CVE de Oracle SOA Suite →
CVE-2026-91536
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)
5.0
Moyenne
CVE-2026-91250
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)
9.9
Critique
CVE-2026-91251
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters)
9.9
Critique
CVE-2026-91238
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)
7.1
Élevée