Unauthorized Data Access in Oracle Application Development Framework (ADF) by Oracle
CVE-2026-46770

6.1MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Application Development Framework (adf)
Vendor
CVE Published:
16 June 2026

What is CVE-2026-46770?

A vulnerability in the Oracle Application Development Framework (ADF) allows unauthenticated attackers with network access via HTTP to compromise the framework. Although the vulnerability resides in ADF, it can trigger significant impacts on additional products due to a change in scope. Successful exploitation requires human interaction, resulting in unauthorized access to modify or read ADF data, including updates, inserts, and deletions. This issue affects versions 12.2.1.4.0 and 14.1.2.0.0 and poses serious risks to data integrity and confidentiality.

Affected Version(s)

Oracle Application Development Framework (ADF) 12.2.1.4.0

Oracle Application Development Framework (ADF) 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.