Vulnerability in Oracle HTTP Server Affects Oracle Fusion Middleware
CVE-2026-87346

8.7HIGH

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-87346?

A vulnerability exists in the Oracle HTTP Server component of Oracle Fusion Middleware, which may allow an unauthenticated attacker with network access via HTTP to exploit the server. Although primarily located within Oracle HTTP Server, the attack's repercussions can extend to other interconnected products. Successful exploitation may result in unauthorized creation, deletion, or modification of critical data, as well as compromised data integrity across all databases accessible through Oracle HTTP Server.

Affected Version(s)

Oracle HTTP Server 12.2.1.4.0

Oracle HTTP Server 14.1.2.0.0

References

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.