中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-60999

Oracle Corporation / Oracle Data Integrator

9.8 · CVSS 3.1Critical

Description

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-61072Oracle Corporation / PeopleSoft Enterprise FIN Staffing Front Office BrazilCVSS 9.9
  • CVE-2026-61065Oracle Corporation / Oracle Access ManagerCVSS 9.8
  • CVE-2026-61059Oracle Corporation / PeopleSoft Enterprise SCM Order ManagementCVSS 9.1
  • CVE-2026-61041Oracle Corporation / Oracle Demantra Demand ManagementCVSS 9.9
  • CVE-2026-60880Oracle Corporation / Oracle Work in ProcessCVSS 9.8
  • CVE-2026-60773Oracle Corporation / Oracle Application Object LibraryCVSS 9.6
  • CVE-2026-60719Oracle Corporation / Oracle BI PublisherCVSS 9.9
  • CVE-2026-60711Oracle Corporation / Siebel CRM Cloud ApplicationsCVSS 9.9

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.