Vulnerability in Oracle Utilities Application Framework Affecting Oracle Utilities Applications

CVE-2026-21924

What is CVE-2026-21924?

A vulnerability exists in Oracle Utilities Application Framework that can be exploited by a low-privileged attacker with network access via HTTP. This flaw allows unauthorized updates, insertions, or deletions to accessible data within the framework. Moreover, it requires human interaction from a third party, potentially amplifying the risk. The impact of successful attacks may extend beyond the framework, affecting other connected products. Organizations using the affected versions should assess their security posture to mitigate possible unauthorized access.

References