CVE-2026-47056: Critical severity Oracle Oracle Data Integrator vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Data Integrator. While the vulnerability is in Oracle Data Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Affected Software

3 affected components

Oracle Oracle Data Integrator=12.2.1.4.0, =14.1.2.0.0

Oracle Data Integrator=12.2.1.4.0

Oracle Data Integrator=14.1.2.0.0

Event History

Jul 21, 2026

CVE Published

via MITRE·09:33 PM

Data Sourced

via MITRE·09:33 PM

DescriptionSeverity

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-47056?

CVE-2026-47056 has a severity rating of critical, with a score of 10.

How do I fix CVE-2026-47056?

To remediate CVE-2026-47056, update your Oracle Data Integrator to the latest version, specifically versions 12.2.1.4.0 or 14.1.2.0.0, that include the security patch.

What are the affected versions for CVE-2026-47056?

The affected versions for CVE-2026-47056 are Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0.

Who can exploit CVE-2026-47056?

CVE-2026-47056 can be exploited by any unauthenticated attacker with network access via HTTP.

What components are impacted by CVE-2026-47056?

CVE-2026-47056 impacts the Rest Service component of Oracle Data Integrator in Oracle Fusion Middleware.