CVE-2026-62609
CriticalCVSS 9.8Summary
Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. An unauthenticated attacker with network access via TCP can take over Oracle Reports Developer. CVSS 9.8.
Risk Assessment
The risk is full takeover of Oracle Reports Developer, leading to complete loss of confidentiality, integrity, and availability.
Recommendation
Apply Oracle patches immediately. Restrict access to TCP ports used by Oracle Reports Developer.
Original NVD description (English source)
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).