CVE-2026-62621

CriticalCVSS 9.8

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Vulnerability in Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). Affects version 12.2.1.19.0. Easily exploitable by unauthenticated attacker via TCP. Successful attacks can result in takeover of Oracle Reports Developer.

Risk Assessment

Critical risk of system takeover, potentially leading to full compromise of data and resources.

Recommendation

Apply patches from Oracle for version 12.2.1.19.0. Restrict access to TCP service and monitor network traffic.

Original NVD description (English source)

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).