CVE-2026-62633
CriticalCVSS 9.8Summary
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
Risk Assessment
Takeover of Oracle Reports Developer by an unauthenticated attacker can lead to full system compromise, including access to sensitive data, modification, and disruption of service availability. The high CVSS score of 9.8 indicates a critical threat.
Recommendation
It is recommended to immediately apply patches provided by Oracle for version 14.1.2.0.0. Also, restrict network access to the HTTP service to trusted hosts only.
Original NVD description (English source)
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).