Vulnerability in Oracle Fusion Middleware's HTTP Server Component

CVE-2026-34291

What is CVE-2026-34291?

An unauthenticated access vulnerability has been identified in the Oracle HTTP Server component of Oracle Fusion Middleware which affects the 12.2.1.4.0 and 14.1.2.0.0 versions. This vulnerability is challenging to exploit but allows attackers with network access to compromise the HTTP server without any authentication. The potential impact includes unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to sensitive information within the Oracle HTTP Server environment. Given the interconnectedness of systems, successful exploitation may not only affect the HTTP server but could also lead to broader implications across various associated products.

References