CVE-2026-60501: Medium severity Oracle Oracle Fusion Middleware - Service Delivery Platform (Messaging Enabler) vulnerability
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Service Delivery Platform executes to compromise Service Delivery Platform. While the vulnerability is in Service Delivery Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Service Delivery Platform accessible data as well as unauthorized read access to a subset of Service Delivery Platform accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60501?
The severity of CVE-2026-60501 is classified as medium with a score of 5.2.
What systems are affected by CVE-2026-60501?
CVE-2026-60501 affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware's Service Delivery Platform.
How do I fix CVE-2026-60501?
To fix CVE-2026-60501, apply the latest security patches provided by Oracle for the affected versions.
What type of vulnerability is CVE-2026-60501?
CVE-2026-60501 is categorized as an easily exploitable vulnerability that allows low privileged attackers to gain unauthorized access.
What component of Oracle Fusion Middleware is affected by CVE-2026-60501?
CVE-2026-60501 specifically impacts the Messaging Enabler component of the Service Delivery Platform in Oracle Fusion Middleware.