Vulnerability in Oracle Data Integrator of Oracle Fusion Middleware
CVE-2026-35262

8.3HIGH

Key Information:

Vendor

Oracle
Status
Oracle Data Integrator
Vendor
CVE Published:
16 June 2026

What is CVE-2026-35262?

An exploitable vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware allows low-privileged attackers to compromise the system via HTTP. Successful exploitation could lead to unauthorized creation, deletion, or modification of critical data. Attackers can gain complete access to Oracle Data Integrator data, potentially causing a partial denial of service. This vulnerability requires only network access and can have serious repercussions for data security and integrity.

Affected Version(s)

Oracle Data Integrator 12.2.1.4.0

Oracle Data Integrator 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.