← Back to browse · API

CVE-2026-60379

Severity
CRITICAL
CVSS
10.0
EPSS
0.00473
Risk score
40.17
CISA KEV
No
PoC
No
Published
2026-07-21
Modified
2026-07-24
First seen
2026-08-05
Aliases
EUVD-2026-46785, GHSA-32HH-5H5C-MF3W
Products
Oracle:Service Delivery Platform 12.2.1.4.0, Oracle:Service Delivery Platform 14.1.2.0.0, oracle:fusion_middleware, oracle:service_delivery_platform
Sources
nvd CVE-2026-60379
euvd EUVD-2026-46785

Description

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Service Delivery Platform. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

References