Unauthenticated OS command injection in Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 lets remote attackers execute arbitrary commands as root by forging an IP-FROM: 127.0.0.1 header to bypass login and supplying a crafted file_id parameter to /protocol.csp?opt=ovpn_file with type=del. Publicly available exploit code exists, and the VulnCheck advisory plus a public write-up describe the flaw; no CISA KEV confirmation was provided. The assessed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, making this a high-priority exposure when the management interface is reachable.
Unauthenticated remote code execution in PiFlow 2.0.0-2.0.1 allows network attackers to drive the DeepAgents chat agent through POST /chat or POST /chat/stream and invoke the exec_shell tool, which runs arbitrary commands via subprocess.run without human approval or an allow-list. Publicly available exploit code exists, and successful exploitation can expose LLM API keys and database credentials present in the process environment. This is a genuine high-priority risk for exposed deployments where the chat agent feature is enabled and reachable, with no CISA KEV entry indicated in the supplied data.
Unauthenticated remote command execution in Langchain-Chatchat through version 0.3.1.3 allows any network-reachable attacker to invoke the built-in shell tool through the POST /tools/call endpoint and run arbitrary OS commands as the Chatchat server user. Because the shipped Docker image runs the service as root, successful exploitation typically yields root-level command execution. Publicly available exploit code exists; there is no CISA KEV confirmation of active exploitation at time of analysis.
Unauthenticated remote code execution and full administrative takeover affect Letta deployments through 0.16.8 that use the project's shipped compose.yaml, because the file leaves LETTA_SERVER_SECURE unset so the password middleware is never registered and every REST API route is reachable without credentials. A network-positioned attacker can therefore invoke POST /v1/tools/run to execute arbitrary Python, manage users via /v1/admin, and - through the same compose file's published PostgreSQL superuser port with default credentials - run operating-system commands via COPY PROGRAM. Publicly available exploit code exists and the issue has been cataloged by VulnCheck, though it is not confirmed actively exploited (CISA KEV); exploitation requires only that the instance be network-reachable in its default configuration, with no authentication or user interaction needed.
Missing authorization in OpenSRE through 0.1.2026.10.19 allows remote attackers to run shell commands on the agent host without any human confirmation, because the headless presenter's execution_allowed() returns True unconditionally for every shell_run request. The practical attack path is prompt injection: crafted instructions placed in an alert feed or Slack message that the agent triages get interpreted as commands, letting the attacker execute on the host and exfiltrate LLM, Slack and cloud credentials. No CISA KEV entry exists and EPSS is low at 0.45% (38th percentile), but SSVC rates exploitation proof-of-concept, automatable and total technical impact, and a public PoC reference exists that is not verified as working exploit code; the priority label is act_now.
EvoScientist 0.1.0 up to (but not including) 0.2.5 lets an attacker reach host shell execution by delegating work to async sub-agents that carry no human-approval gate: instructions planted in ingested content such as a fetched web page can cause the agent to call start_async_task, and the resulting commands run with the invoking user's OS privileges and environment secrets. The bypass is a missing-authorization flaw (CWE-862) in the approval wiring rather than a credentials attack - per CVSS 4.0 (AV:N/AC:L/PR:N/UI:N, all impact metrics High) and our assessed CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) it is unauthenticated and requires no user interaction beyond the agent processing the poisoned content, and per the fix the vulnerable async thread lacks any approval path at all, so exploitation does not depend on auto_approve being enabled. A public PoC reference exists; it is not verified as working exploit code, EPSS is low at 0.44% (37th percentile), SSVC marks exploitation as 'poc' with automatable/total technical impact, and the vuln.today decision label is act_now with a vendor fix in v0.2.5.
DB-GPT through 0.8.2 ships a default docker-compose.yml that hardcodes the MySQL root password and publishes port 3306 on every host interface, so any instance deployed with the stock configuration exposes a root@% database account with publicly known credentials. An unauthenticated remote attacker who can reach port 3306, or who has a foothold on the shared 'dbgptnet' Docker bridge network, can log in with that static password and inherit FILE and SUPER privileges - full read/write access to all DB-GPT data plus the ability to read or write files on the database host. Publicly available exploit code exists (referenced by VulnCheck and Lasso Security); the issue is not in CISA KEV, but any deployment left in its default state is directly exploitable, and operators who rotated the root password, bound 3306 to localhost, or firewalled the host are materially less exposed.
Unauthenticated remote code execution in DB-GPT through 0.8.2 allows remote attackers to reach the /api/v1/chat/react-agent endpoint, where a mock get_user_from_headers function grants every caller the admin role. Crafted prompts can cause the ReAct agent's unsandboxed code_interpreter and shell_interpreter tools to execute arbitrary Python or bash as root in the webserver container, potentially reaching the bundled database with default credentials. Publicly available exploit code exists; the provided data does not confirm active exploitation, and the assessed CVSS 3.1 severity is 9.3 with network access, no privileges, and no user interaction required when the endpoint and interpreter tools are deployed and reachable.
OS command injection in DrayTek Vigor2960 firmware 1.5.1.6 Revision 8218 allows authenticated, low-privilege attackers to execute arbitrary shell commands on the device through the web management interface. The flaw resides in the CGI handler /cgi-bin/mainfunction.cgi (function sub_182B0), where the usefile, usescript, and option parameters are passed to a shell without adequate sanitization. Publicly available exploit code exists, and the vendor has classified the Vigor2960 as End-of-Service with only limited support, so legacy deployments exposing the management interface are the primary exposure.
Remote code execution in Google Chrome for iOS prior to 156.0.8078.47 is possible when a victim opens a crafted HTML page, triggering a use-after-free in the iOSWeb component. The CVSS 3.1 score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting mandatory user interaction and code execution confined to the browser sandbox; no public exploit was identified at time of analysis. Google has released 156.0.8078.47 to correct the flaw.
Authenticated remote code execution in JoySafeter through 1.0.0 allows any self-registered low-privilege user to run host operating-system commands by selecting Copilot standard mode and invoking its unsandboxed execute tool over the WebSocket chat.start extension. Successful exploitation can expose other tenants' data and server secrets because the agent calls subprocess.run with shell=True outside a sandbox, and publicly available exploit code exists. The assessed CVSS 3.1 vector requires only PR:L with no user interaction, so internet-facing deployments that allow open registration are directly exposed and warrant operational priority.
Aix-DB 1.2.4 ships a ChatBI 'common agent' that exposes the deepagents execute tool without any gating, letting any authenticated non-admin user escalate from chat input to host-level operating system command execution. The two documented paths are crafted text sent to the POST /dify/get_answer endpoint and uploaded documents containing malicious text that the agent processes; successful exploitation exposes datasource credentials and model API keys held by the application. Publicly available exploit code exists, and the issue carries a CVSS 4.0 base score of 8.7, though exploitation is bounded by the need for a valid low-privileged account on a deployment that has the ChatBI common agent enabled.
Remote code execution in Coze Studio before 0.5.0 allows any registered user to run arbitrary commands through workflow code nodes because the shipped default CODE_RUNNER_TYPE="local" executes Python in an unsandboxed host subprocess. The regex import filter can be bypassed with __import__('subprocess'), exposing environment variables, model API keys, and connected services including MySQL, MinIO, Redis, and etcd; publicly available exploit code exists. The vendor fix changes the default runner to "sandbox" in 0.5.0, so self-hosted instances that have not overridden the default are the primary exposure.
Indirect prompt injection in LangAlpha through 2026.09.07 allows remote attackers to run shell commands or Python inside the agent's workspace sandbox by planting instructions in web content the agent retrieves; the described payload then reads vault secrets from _internal/.vault_secrets.json. No CISA KEV entry or confirmed active exploitation is reported, and a public PoC reference exists; it is not verified as working exploit code. EPSS is 0.43% (36th percentile), the reporting source is VulnCheck, and the vuln.today priority is this_week, reflecting a real but non-emergency risk.
Coze Studio through 0.5.1 exposes cross-tenant workflow access because its workflow API trusts a client-supplied workflowID without verifying that the object belongs to the caller's space. An authenticated low-privilege user who knows or enumerates another tenant's workflowID can pair it with their own spaceID and read, run, overwrite, or delete that workflow via the save, update_meta, batch_delete, canvas, test_run, and nodeDebug routes. Publicly available exploit code exists, and exposure is highest on shared or multi-tenant deployments that allow untrusted users to register, while single-tenant private installations face lower practical risk.
Unauthenticated file disclosure in LavaLite CMS through 10.1.2 allows remote attackers to download private stored files through the Filer module's filer/download and filer/display routes. Attackers can supply arbitrary disk names and paths to FileController, exposing private local uploads or data on configured remote S3 disks when paths or disk names are known or enumerable. Publicly available exploit code exists, and no CISA KEV status is indicated in the provided data; assessed impact is confidentiality-only, with no integrity or availability effect.
Cross-tenant impersonation in Letta through 0.16.8 allows an authenticated low-privileged API caller to read and modify another user's agents, memory, and configuration by setting the self-asserted user_id HTTP header to the victim's tenant ID, even when LETTA_SERVER_SECURE is enabled. The server trusts the client-supplied identity key during request resolution, so the bypass requires only API connectivity and a known or guessed target user_id, not credential theft or memory corruption. Publicly available exploit code exists, with no CISA KEV listing confirming active exploitation; this is a genuine high-priority issue for multi-tenant or shared Letta deployments, while single-user instances have little cross-tenant data to expose.
Authenticated remote command injection in aaPanel through 8.25.0 allows a logged-in panel user to execute arbitrary operating-system commands through the File Manager ExecShell code path in class/public/common.py by manipulating the sfile, dfile, access, or user argument. The vendor confirms the issue requires authentication, and publicly available exploit code exists with no CISA KEV confirmation provided. Panels exposed to the internet with weak, shared, or semi-trusted credentials carry the highest practical risk.
Stirling-PDF 2.13.2 through 3.2.0 lets an authenticated administrator regain Java method execution by uploading a crafted SQL backup to the import-database endpoint. The incomplete denylist in DatabaseService.validateSqlContent() does not block CREATE OR REPLACE ALIAS statements, so a RUNSCRIPT payload can define H2 Java function aliases and re-enable the code-execution path the import restrictions were meant to close (CWE-184). Publicly available exploit code exists, including a proof-of-concept repository and accompanying research writeups; there is no CISA KEV listing, and the decisive mitigating factor is the PR:H administrator prerequisite, which confines realistic risk to compromised or malicious admin accounts and to shared or multi-tenant instances where an administrator is not fully trusted.
Authenticated command injection in DrayTek Vigor2960 1.5.1.6 Revision 8218 allows a low-privileged user with valid credentials to reach the web administration interface and supply a crafted language-upload filename that is executed as shell commands, compromising confidentiality, integrity, and availability of the device. This is a genuine but conditional priority: publicly available exploit code exists, but successful exploitation requires network reachability to the management interface and valid low-privilege credentials. DrayTek has released firmware 1.5.1.7, which the vendor indicates corrects this issue and other security problems in the end-of-sale Vigor2960 line.
Authenticated command injection in DrayTek Vigor2960 1.5.1.6 Revision 8218 lets a low-privileged user of the web management interface run arbitrary OS commands by manipulating the sectiontype argument to set_table in /cgi-bin/mainfunction.cgi. Publicly available exploit code exists, but the attack requires valid credentials and network reachability to the HTTP(S) management service. The vendor has placed the Vigor2960 on end-of-support with limited maintenance, so replacement or mitigation is more realistic than waiting for a dedicated fix.
PHP object injection in DokuWiki's draft subsystem lets an authenticated user who holds edit rights on any page race concurrent draft rewrites to splice attacker-controlled serialized data into a draft file that Draft::getDraftText() passes to unserialize() without an allowed_classes restriction, enabling arbitrary file write, file deletion, and PHP code execution through core gadgets such as MemoryIndex and Installer. All DokuWiki installations before the 2026-07-14c release are affected in their default configuration, and exploitation is gated on a valid account with write permission plus a non-deterministic race, so repeated attempts may be required; environments where only trusted administrators can edit face substantially reduced exposure. Publicly available exploit code exists (a proof-of-concept gist is linked from the vendor issue), but there is no CISA KEV confirmation of active exploitation. This is a credible but conditional priority rather than a drop-everything emergency.
Authenticated users of Letta through 0.16.8 can read server secrets when the LocalSandbox tool backend is used, because tool subprocesses inherit the server process environment; calling POST /v1/tools/run or running a custom tool can expose LETTA_PG_URI, POSTGRES_PASSWORD, and provider API keys. In multi-tenant deployments sharing one Postgres instance, those leaked database credentials can be used to reach other tenants' data, although single-tenant or properly isolated sandbox deployments are much less exposed. Publicly available exploit code exists, but the provided data does not confirm active exploitation (no CISA KEV entry), and exploitation requires an authenticated account with permission to execute tools.
Authenticated users on multi-user Stirling-PDF 3.0.0 through 3.2.0 can reach other tenants' stored documents by creating a processing folder whose path points into the server's storage directory at storage/<victimUserId>, then listing and running pipelines against that folder to read, alter, or delete the victim's files. The flaw is an authorization bypass through a user-controlled key (CWE-639) exposed by the proprietary processing-folder API (POST /api/v1/processing-folders) and the FolderAccessGuard check shipped in those releases. Publicly available exploit code exists, published alongside a technical write-up and a proof-of-concept repository, so the barrier to reproduction is low for anyone holding a valid account on an instance that hosts more than one user's files; EPSS scoring was not supplied in the available intelligence. The supplied CVSS 4.0 vector rates it 7.1 with PR:L, while our independent CVSS 3.1 assessment scores it 8.8 (C:H/I:H/A:H), and neither rating reflects anonymous exploitation - the practical exposure is a multi-tenant deployment risk rather than an internet-wide mass-exploitation event.
Cross-tenant container access in LangAlpha through 2026.09.07 allows an authenticated tenant who can execute code inside their own sandbox container to reach peer tenants' containers over Docker's shared default bridge network and read sensitive data such as vault secrets. Because inter-container communication is enabled by default and every tenant sandbox sits on that same bridge, the platform's require_workspace_owner authorization checks are effectively bypassed for traffic originating from a sibling container. Publicly available exploit code exists and the flaw is tracked as CWE-653 (Improper Isolation or Compartmentalization); exploitation requires a multi-tenant deployment, prior code execution in one's own sandbox (PR:L), and a co-tenant running an exposed, network-listening service that holds secrets, so this is best treated as a medium-priority, conditional isolation defect rather than an emergency.
Unauthenticated remote takeover of Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 is achievable through the Adapters component of Oracle Fusion Middleware, with Oracle assigning the maximum CVSS 3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). No credentials, user interaction, or special preconditions are required beyond network reachability of the SOA Suite HTTP listener, and the scope-change rating means successful exploitation can cascade into connected or dependent products rather than being contained to the SOA Suite host. At the time of analysis there is no public exploit code or CISA KEV listing, but the combination of maximum severity, unauthenticated access, and low complexity makes this a top-priority patch item for any internet- or broadly internally reachable deployment.
Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 are exposed to unauthenticated remote takeover through the Fabric Layer component reachable via T3 and IIOP. An attacker with network access can exploit the flaw without credentials or user interaction to achieve high confidentiality, integrity, and availability impact; the changed scope means interconnected products may also be affected. No public exploit identified at time of analysis, and the supplied intelligence does not indicate CISA KEV listing, but the unauthenticated network vector and CVSS 10.0 score make this a top-priority exposure for internet- or broadly reachable T3/IIOP listeners.
Unauthenticated remote takeover of Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 is possible through the Fabric Layer over T3 or IIOP, with a maximum CVSS 3.1 score of 10.0 and a scope change indicating impact beyond the SOA Suite host. Any attacker who can reach the T3/IIOP listener needs no credentials or user interaction, so exposure is primarily governed by network reachability. The provided intelligence shows no KEV listing and no public exploit identified at time of analysis, but the assessed risk remains top-priority because successful exploitation can fully compromise confidentiality, integrity, and availability.
Unauthenticated remote takeover of Oracle E-Business Suite Workflow is possible in versions 12.2.3 through 12.2.15 via HTTP through the Workflow Notification Mailer component. Successful exploitation has a CVSS 3.1 base score of 10.0 with scope change, meaning confidentiality, integrity, and availability impact can extend beyond Workflow to additional products. No public exploit was identified at time of analysis and no KEV entry was provided.
Unauthenticated remote attackers can compromise Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 through the Authentication Engine, obtaining high-impact confidentiality and integrity access and potentially affecting other products because the CVSS scope is changed. The CVSS 3.1 base score is 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N), with no availability impact; no public exploit identified at time of analysis. Exposure depends on reachability of the OAM authentication endpoint, and default deployments appear exploitable because the description calls out no special configuration prerequisite.
Unauthenticated remote takeover of JD Edwards EnterpriseOne Orchestrator affects versions 9.2.0.0 through 9.2.26.5, where a network attacker can compromise the E1 IOT Orchestrator Security component over HTTP without credentials or user interaction. The CVSS 3.1 score is 10.0 with scope change, meaning a successful attack can extend beyond the Orchestrator into additional connected EnterpriseOne products. No public exploit code or CISA KEV entry is identified at time of analysis, but the maximum severity, unauthenticated network vector, and broad version range make this a top remediation priority for exposed deployments.
Argo CD's repo-server evaluates .jsonnet files with an importer that is not confined to the repository root, allowing authenticated users who hold only Application 'get' permission to read any file the repo-server can access and to exhaust its memory. Affected deployments are Argo CD 0.9.0 through the releases preceding 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, where absolute paths, parent-directory traversal, and repository symlinks can reach files such as /proc/self/environ, projected service-account tokens, mounted private keys, and repository credentials; stolen data must be routed through a non-Secret resource like a ConfigMap because generated Secrets are redacted, and importstr on a non-terminating device like /dev/zero can cause a denial of service. No public exploit code was identified at time of analysis, but Argo CD's default role:catch-all policy grants Application get to every authenticated user, so the upload path through POST /api/v1/applications/manifestsWithFiles lowers the bar substantially on multi-tenant installations.
Unauthenticated remote write access in IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an attacker manipulate the shared Redis backing store under any tenant's key, collapsing the platform's credential-encryption boundary and allowing cached flow parameters to be poisoned across tenants. The issue is rated CVSS 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) and requires the multi-tenant deployment pattern where tenants share the same Redis instance. No public exploit was identified at time of analysis, and no CISA KEV entry was provided.
OpenStack Manila before 23.0.1 allows any authenticated member of an OpenStack project to act on another tenant's public share, exposing data and enabling access-rule and lifecycle tampering. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H (9.9), reflecting a low-privileged, network-reachable cross-tenant authorization failure; target shares must be public, which makes their UUIDs visible. No public exploit code was identified at time of analysis, and active exploitation is not confirmed in the supplied data.
Takeover of Oracle Enterprise Manager 13.5 and 24.1 is achievable by a low-privileged authenticated attacker with HTTP access to the Data Guard Management component. Exploitation requires only network reachability and a low-privilege account, yields high confidentiality, integrity and availability impact, and can affect additional products because of the CVSS scope change; no public exploit identified at time of analysis.
Low-privileged console users can achieve full takeover of Oracle Enterprise Manager for Oracle Database 13.5 and 24.1 through the Data Guard Management component, with scope change extending impact to managed databases and additional products reachable from the management server. The issue is network-reachable over HTTP with low complexity and no user interaction, but it requires a valid low-privileged OEM account (PR:L), so it is not unauthenticated. No public exploit code or confirmed active exploitation was identified at time of analysis; the CVSS 3.1 base score is 9.9.
Oracle Trusted Answer Search 26.1 contains a PL/SQL package flaw that lets low-privileged, authenticated attackers with Oracle Net connectivity fully compromise the component and potentially affect additional products due to a scope change. The CVSS 3.1 score is 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting high confidentiality, integrity, and availability impact; exploitation requires valid low-privilege database credentials rather than anonymous access. No public exploit code or confirmed active exploitation was identified at time of analysis.
Remote takeover of Oracle SOA Suite is possible for low-privileged, authenticated attackers who can reach the Adapters component over HTTP, affecting versions 12.2.1.4.0 and 14.1.2.0.0; Oracle rates it CVSS 9.9 because successful exploitation can also significantly affect connected products through scope change. No public exploit was identified at time of analysis, but the combination of low attack complexity, no user interaction, and high confidentiality, integrity, and availability impact makes this a high-priority patch target.
Low-privileged authenticated attackers with network access can take over Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 through its Adapters component, with CVSS 9.9 and a scope change that can extend impact to connected Oracle products. Exploitation requires only low privileges and no user interaction, though authentication requirements keep fully unauthenticated attacks out of scope; no public exploit code or CISA KEV entry was identified at time of analysis. This is a high-priority issue because the Adapters interface is often network-exposed and the scope change can amplify a single compromise across integrated middleware.
Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 contain an easily exploitable Fabric Layer flaw that lets a low-privileged, network-positioned attacker take over the SOA Suite service over HTTP. Successful exploitation can also impact integrated products because the vulnerability changes scope, with high confidentiality, integrity, and availability impact; a low-privilege authenticated account is required. No public exploit code or CISA KEV entry was identified at the time of analysis.
Oracle Business Process Management Suite 12.2.1.4.0 and 14.1.2.0.0 can be fully compromised by a low-privileged, authenticated remote attacker exploiting the Human Workflow (11g+) component over SOAP, with a scope change that may extend impact to additional products. Successful exploitation can result in takeover of the BPM Suite with high confidentiality, integrity, and availability impact. No public exploit code or CISA KEV entry was identified at time of analysis, but the low attack complexity and high impact make this a priority patching target.
Takeover of Oracle Siebel CRM Cloud Applications is possible through the Siebel Cloud Manager component in supported versions 17.0 through 26.9, where a low-privileged, authenticated attacker with HTTP network reachability can exploit the flaw to gain full control of the application. The CVSS 3.1 score is 9.9 with a scope change (S:C), reflecting that compromise of Cloud Manager can spill over into additional, dependent products, with high confidentiality, integrity, and availability impact. Exploitation requires a valid low-entitlement account or reachable authenticated interface rather than anonymous access, but once that foothold exists, attack complexity is low and no user interaction is needed; no public exploit code or confirmed active exploitation was identified at time of analysis, and Oracle addresses the issue in its October 2026 Critical Patch Update.
Argo CD deployments that run Kustomize with --enable-helm enabled can be tricked into executing attacker-supplied code inside argocd-repo-server, because helmGlobals.configHome lets a repository redirect Helm's config/data home to a repository-controlled path and Helm then auto-loads and runs a downloader plugin from <configHome>/.data/plugins without any plugin-install step. The barrier is low-privilege authenticated access (CVSS PR:L, scope-changed, 9.9): an attacker can either commit the Kustomization and plugin to a Git repository an Application already builds, or push the same files through POST /api/v1/applications/manifestsWithFiles (also reachable via argocd app diff --local --server-side-generate), which requires only Application get permission on an existing Application - no update, sync, or repository write rights. The payload runs as the repo-server user and can read repository credentials and other process-accessible data, so the blast radius extends beyond the Application itself; no public exploit code or confirmed active exploitation was identified at time of analysis, and the --enable-helm flag is a hard prerequisite - deployments that never enabled it are unaffected.
Authenticated low-privileged users can achieve integrity compromise and cause repeated denial of service against Oracle Trusted Answer Search 26.1 through a PL/SQL package reachable over Oracle Net, with the CVSS 3.1 score reaching 9.9 because the scope-change flag (S:C) extends the impact to additional products beyond the vulnerable component. Confidentiality exposure is limited to a subset of accessible data, but attackers can create, delete, or modify critical data and hang or repeatedly crash the service. No public exploit code or confirmed active exploitation was identified at time of analysis, and the exposure hinges on whether low-privilege accounts and Oracle Net listener access are broadly granted in a given environment.
Oracle Essbase 21.8.3.0.0 (Security component) permits a low-privileged authenticated user to take full control of the Essbase deployment over HTTP, with high confidentiality, integrity, and availability impact and a scope change that can extend compromise to integrated products. Exploitation requires network reachability to the Essbase HTTP interface plus valid low-level credentials (CVSS PR:L, AC:L, UI:N), so anonymous attacks are not indicated - the attacker must already hold some account on the server. Our assessment rates this as a genuine high-priority vulnerability rather than a high-CVSS-but-low-risk paper tiger; no public exploit code and no confirmed active exploitation (CISA KEV) were identified at time of analysis. No CWE was published, so the precise root-cause class is not confirmed from available data.
Oracle Outside In Technology 8.5.8 contains a high-severity flaw in the Outside In Clean Content SDK that becomes exploitable when the SDK is embedded in an HTTP-facing service accepting attacker-supplied files for parsing or conversion. A low-privileged authenticated network attacker can exploit it without user interaction to achieve high confidentiality, integrity, and availability impact, with scope change extending the impact to the host product. No public exploit code or CISA KEV entry was identified at time of analysis.
Low-privileged authenticated attackers can take full control of Oracle SOA Suite 12.2.1.4.0 and 14.1.2.0.0 through the Fabric Layer component reachable over HTTP, with a CVSS 3.1 base score of 9.9. The scope-change rating (S:C) means a successful compromise is not contained to the SOA Suite instance and can significantly impact additional connected products, so confidentiality, integrity and availability are all rated high. No public exploit code or CISA KEV entry was identified at time of analysis, and no EPSS score was supplied; the practical gate for attackers is possession of any valid low-privilege account plus network reachability of the SOA Suite HTTP interface.
Authenticated low-privileged attackers with network access to Oracle Essbase 21.8.3.0.0's T3/IIOP listeners can achieve full takeover of the Essbase instance, with scope change allowing significant impact on additional products. The vulnerability carries a CVSS 3.1 base score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) and is considered high priority; no public exploit identified at time of analysis, and no CISA KEV confirmation was provided. Exploitation is gated by reachability to the T3/IIOP management protocols and possession of a low-privileged account.
Remote takeover of Oracle Essbase 21.8.3.0.0 is possible for low-privileged authenticated attackers with HTTP network access, due to a security flaw in the product's Security component. Successful exploitation can fully compromise confidentiality, integrity, and availability and, because of the scope change, may extend impact to additional connected products. This is a high-priority vulnerability; no public exploit identified at time of analysis, and the CVSS 3.1 base score is 9.9.
Oracle Essbase 21.8.3.0.0 contains an easily exploitable flaw in its Security component that lets a low-privileged, network-positioned attacker take over the Essbase deployment over HTTP. The CVSS 3.1 base score is 9.9 with scope change (S:C), meaning a compromise is not contained to Essbase and can significantly affect other products sharing the deployment. Authentication requirements are confirmed from the vector as low-privileged (PR:L) with no user interaction (UI:N); no public exploit code or CISA KEV active exploitation is identified in the available data.