CVE-2026-60866

MediumCVSS 6.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

Vulnerability in Service Delivery Platform (component: Messaging Enabler) affects version 14.1.2.0.0. It is easily exploitable by an unauthenticated attacker via HTTP, allowing unauthorized update, insert, or delete access and read access to a subset of data.

Risk Assessment

Risk of integrity and confidentiality breach in Service Delivery Platform, potentially leading to unauthorized modifications and information disclosure.

Recommendation

Apply Oracle patches for version 14.1.2.0.0 and restrict network access to the platform if possible.

Original NVD description (English source)

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Service Delivery Platform accessible data as well as unauthorized read access to a subset of Service Delivery Platform accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).