EUVD-2026-79358
GHSA-7f3f-wffv-qrc4
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Network-reachable T3/IIOP service but exploitation needs a valid low-privileged account, so PR:L with AC:L and low confidentiality but full integrity and availability loss.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Managed File Transfer accessible data as well as unauthorized read access to a subset of Oracle Managed File Transfer accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Managed File Transfer. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H).
AnalysisAI
Oracle Managed File Transfer (MFT) versions 12.2.1.4.0 and 14.1.2.0.0 contain a flaw in the MFT Runtime Server that a low-privileged, network-positioned attacker can abuse over the WebLogic T3 or IIOP protocols to gain unauthorized integrity control over critical MFT data, read a subset of it, and repeatedly crash the runtime for a complete denial of service. Oracle rates the issue 8.3 with a C/L/I/H/A/H impact profile, meaning the biggest exposure is tampering with transfer configurations, payloads and schedules rather than wholesale data theft. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concrete things: (1) network reachability to the Oracle Managed File Transfer MFT Runtime Server's WebLogic T3 or IIOP listener ports, which are typically bound to internal interfaces and should be firewalled to administration tiers; (2) a valid low-privileged account on the MFT/WebLogic domain - the CVSS vector is PR:L, so this is an authenticated attack, not unauthenticated, and the attacker must already possess working credentials; and (3) the MFT Runtime Server component must be running, i.e. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) describes a network-reachable, low-complexity, no-user-interaction bug that requires only a low-privileged account - a fairly low bar in environments where contractors, integration accounts or compromised service credentials exist, and a mid-sized municipal IT team in rybnik running an on-prem MFT hub should treat this as urgent once they confirm the runtime is reachable. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: apply the Oracle Critical Patch Update/Security Alert referenced at https://www.oracle.com/security-alerts/cspusep2026.html for Oracle Managed File Transfer 12.2.1.4.0 and 14.1.2.0.0; the advisory is the only authoritative source for the exact patched build numbers, so confirm the fixed bundle version there before closing the ticket, and patch WebLogic Server components delivered in the same bundle since MFT depends on them. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today