Vulnerability in Oracle HTTP Server of Oracle Fusion Middleware
CVE-2026-87347

9.6CRITICAL

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-87347?

An exploitation vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware presents a risk to users with network access via HTTP. Attackers with limited privileges can exploit this flaw to gain unauthorized control, potentially allowing them to create, delete, or modify critical data accessible through the server. Furthermore, successful exploitation could lead to significant consequences beyond the server itself, threatening the integrity and confidentiality of associated systems and data.

Affected Version(s)

Oracle HTTP Server 12.2.1.4.0

Oracle HTTP Server 14.1.2.0.0

References

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.