CyberRota Analysis
AI-GeneratedA vulnerability in Oracle's Service Delivery Platform within the Fusion Middleware (version 14.1.2.0.0) allows unauthenticated attackers with network access via HTTP to manipulate accessible data, including unauthorized updates, inserts, and deletions, as well as unauthorized read access to certain data. The potential impact on confidentiality and integrity makes this a medium-severity issue that organizations using this version of Oracle Fusion Middleware should prioritize for remediation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Service Delivery Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Service Delivery Platform accessible data as well as unauthorized read access to a subset of Service Delivery Platform accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Related CVEs
Other vulnerabilities affecting the same vendor(s)