CERT24CVE-2026-91215: critical access-control vulnerability in Oracle SOA SuiteLoading data…
CERT24Threat Observatory
Period

CVE-2026-91215: critical access-control vulnerability in Oracle SOA Suite

A vulnerability affects Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable, low-privileged attacker with network access via HTTP can compromise Oracle SOA Suite. Successful attacks can result in takeover of Oracle SOA Suite. The CVSS 3.1 base score is 8.8.

← Back to intelligence

CVE-2026-91215: critical access-control vulnerability in Oracle SOA Suite

A vulnerability affects Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable, low-privileged attacker with network access via HTTP can compromise Oracle SOA Suite. Successful attacks can result in takeover of Oracle SOA Suite. The CVSS 3.1 base score is 8.8.