EUVD-2026-79357
GHSA-h3vq-2cgj-238c
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Network HTTP, low complexity, and a required low-privileged account (PR:L, not a bypass) with scope change; full C/I on MFT data but no availability impact per description.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Managed File Transfer. While the vulnerability is in Oracle Managed File Transfer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Managed File Transfer accessible data as well as unauthorized access to critical data or complete access to all Oracle Managed File Transfer accessible data. CVSS 3.1 Base Score 9.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).
AnalysisAI
Oracle Managed File Transfer (MFT) Runtime Server, the file-transfer component of Oracle Fusion Middleware, allows an authenticated low-privileged attacker with network HTTP access to create, delete, modify, and read critical data handled by MFT, and the scope change (S:C) means a successful attack can escape the MFT trust boundary and impact additional Oracle products. The flaw is trivially reachable (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N, base 9.6), requiring no user interaction, but it is not pre-authentication: the attacker must already hold valid low-privileged credentials and be able to reach a MFT Runtime Server HTTP endpoint on versions 12.2.1.4.0 or 14.1.2.0.0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid low-privileged account (PR:L) and network HTTP access to the Oracle MFT Runtime Server component of Oracle Fusion Middleware versions 12.2.1.4.0 or 14.1.2.0.0; no user interaction is needed and attack complexity is low. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-priority vulnerability whose 9.6 CVSS score is well-calibrated rather than inflated. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix published in Oracle's Critical Security Patch Update advisory for this CVE (https://www.oracle.com/security-alerts/cspusep2026.html, mirrored at https://nvd.nist.gov/vuln/detail/CVE-2026-83029): patch available per vendor advisory, and because the available data does not disclose a distinct fixed build string, confirm the exact patched MFT Runtime Server release for the 12.2.1.4.x and 14.1.2.x lines directly from that Oracle alert rather than assuming a version number. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all deployments of Oracle Managed File Transfer (MFT) Runtime Server versions 12.2.1.4.0 and 14.1.2.0.0 to understand exposure, and immediately restrict network HTTP access to these systems to only trusted and necessary sources; enforce least privilege on service accounts and review logs for anomalous file operations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName m
Remote code execution in IBM Sterling B2B Integrator, Sterling Integrator, and Tivoli Common Reporting allows unauthenti
Java Runtime Environment sandbox bypass via incorrect image channel verification in 2D component allows remote unauthent
Oracle Java SE JDK/JRE 7 and 6 Update 27 and earlier allows remote code execution with complete system compromise throug
JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Up
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
Remote unauthenticated attackers can execute arbitrary code on Adobe ColdFusion servers through Java deserialization fla
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today