Vulnerability in Oracle Application Development Framework Affects Oracle Fusion Middleware
CVE-2026-46771

4.1MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Application Development Framework (adf)
Vendor
CVE Published:
16 June 2026

What is CVE-2026-46771?

A security vulnerability exists in the Oracle Application Development Framework (ADF) component of Oracle Fusion Middleware that could allow a high-privileged attacker to compromise the ADF environment. This vulnerability is especially concerning as it can lead to unauthorized access to critical data or complete access to information accessible through ADF. The issue affects specific versions of the framework, which must be addressed to secure the application environment and safeguard sensitive data.

Affected Version(s)

Oracle Application Development Framework (ADF) 12.2.1.4.0

Oracle Application Development Framework (ADF) 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.