CVE-2026-70674
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Vulnerability in Oracle Reports Developer (component: Security and Authentication) affects version 14.1.2.0.0. It is easily exploitable by an attacker with access to the physical network segment, allowing takeover of the application.
Risk Assessment
An attacker with local network access can take over the application, potentially leading to full compromise.
Recommendation
Apply Oracle patches for version 14.1.2.0.0. Secure physical access to the network.
Original NVD description (English source)
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer. Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).