Oracle Service Bus vulnerabilities
5 known CVE vulnerabilities in Oracle Service Bus, translated and rated.
- CVE-2026-87420High
Vulnerability in Oracle Service Bus (Core component) affecting version 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Service Bus.
- CVE-2026-87419High
Vulnerability in Oracle Service Bus (Core component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with HTTP network access to take over Oracle Service Bus.
- CVE-2026-87369High
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily cause a hang or repeatable crash (complete DoS) of the product.
- CVE-2026-87364High
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily take over the product.
- CVE-2026-87359High
Vulnerability in Oracle Service Bus (component Core), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily take over the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

