IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
9.8Kritisch

CVE-2026-60999

Oracle Corporation Oracle Data Integrator Veröffentlicht: (vor 3 Monaten)

Beschreibung

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Schwachstellentyp (CWE): CWE-306CWE-284

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
oracle data integrator 14.1.2.0.0
Oracle Corporation Oracle Data Integrator 14.1.2.0.0

Referenzen und Patches

CPE-Treffer (NVD) (2)
  • cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:data_integrator:14.1.2.0.0:*:*:*:*:*:*:*