CoreCVE
Back

CRITICAL

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars)

Published Jul 22, 2026

Description

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (4)

CWE-269

Improper Privilege Management

CWE-287

Improper Authentication

CWE-306

Missing Authentication

CWE-502

Deserialization of Untrusted Data

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Jul 22, 2026
Updated Jul 23, 2026
Reserved Jul 8, 2026
Link CVE-2026-60367
CISA Vulnrichment
Updated Jul 23, 2026
NVD
Status Analyzed
Modified Jul 24, 2026
Link CVE-2026-60367
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-60367