中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-60441

Oracle Corporation / Service Delivery Platform

9.8 · CVSS 3.1Critical

Description

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-60447Oracle Corporation / Oracle WebCenter Enterprise CaptureCVSS 9.9
  • CVE-2026-60446Oracle Corporation / Oracle WebCenter Enterprise CaptureCVSS 9.8
  • CVE-2026-60445Oracle Corporation / Oracle WebCenter Enterprise CaptureCVSS 9.9
  • CVE-2026-60442Oracle Corporation / Service Delivery PlatformCVSS 9.8
  • CVE-2026-60438Oracle Corporation / Oracle HTTP ServerCVSS 9.1
  • CVE-2026-60435Oracle Corporation / Oracle WebCenter ContentCVSS 9.8
  • CVE-2026-60429Oracle Corporation / Oracle Unified DirectoryCVSS 9.9
  • CVE-2026-60424Oracle Corporation / Oracle Unified DirectoryCVSS 9.0

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.