CVE-2016-8281
HighSummary
An unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability.
Risk Assessment
This vulnerability may lead to data breaches and service disruptions, posing a significant threat to the organization.
Recommendation
It is recommended to update to the latest version of Oracle Fusion Middleware and to monitor the system for potential abuses.
Other vulnerabilities in Oracle Platform Security for Java
See all- CVE-2026-83020Critical
Vulnerability in Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker via HTTP to take over the product, with impact on other products (scope change). CVSS 10.0.
- CVE-2026-82995Critical
Vulnerability in Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker via SOAP to take over the product. CVSS 9.8.
- CVE-2026-82994Critical
Vulnerability in Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows unauthenticated attacker via LDAP to take over the product. CVSS 9.8.
- CVE-2026-60372Critical
Vulnerability in Oracle Platform Security for Java (Oracle Fusion Middleware) in the Centralized Thirdparty Jars component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to takeover of Oracle Platform Security for Java. CVSS 9.8.
- CVE-2026-60369Critical
Vulnerability in Oracle Platform Security for Java (Centralized Thirdparty Jars component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows a low-privileged attacker via HTTP to take over the system, with impact on other products (scope change).
- CVE-2026-60367Critical
Vulnerability in Oracle Platform Security for Java (component: Centralized Thirdparty Jars) allows unauthenticated attacker via HTTP to compromise the system. CVSS 9.8.
- CVE-2026-60366Critical
Vulnerability in Oracle Platform Security for Java (component: Centralized Thirdparty Jars) allows unauthenticated attacker via HTTP to compromise the system. CVSS 10.0.
- CVE-2026-83011High
Vulnerability in Oracle Platform Security for Java (component: Centralized Thirdparty Jars) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit but requires no authentication and is accessible via HTTP. Successful attack can lead to takeover of the system.
- CVE-2026-82996High
Vulnerability in Oracle Platform Security for Java (Centralized Thirdparty Jars component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local logon to the infrastructure can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-61246High
Oracle Platform Security for Java (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 have an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to take over the product. CVSS 8.8.
Original NVD description (English source)
Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-5536.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS