Vulnerabilities

TI-2026-77257 CVE-2026-87420 · GHSA-559h-f6mc-46rp

Improper access control in Oracle Service Bus allows takeover

MEDIUM 40

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00389 Published 2026-10-20 No fix listed CWE-284

TI-2026-77256 CVE-2026-87419 · GHSA-r25f-8m5q-7w4w

MEDIUM 40

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00389 Published 2026-10-20 No fix listed CWE-306

TI-2026-77208 CVE-2026-87369 · GHSA-wc84-634v-3p5m

LOW 39

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0045 Published 2026-10-20 No fix listed CWE-400

TI-2026-77204 CVE-2026-87364 · GHSA-wvwg-jh57-xfjc

MEDIUM 40

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00402 Published 2026-10-20 No fix listed CWE-284

TI-2026-77199 CVE-2026-87359 · GHSA-qmx5-r6w6-4q9g

MEDIUM 40

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00472 Published 2026-10-20 No fix listed CWE-200