CVE-2026-61246: High severity Oracle Oracle Platform Security for Java vulnerability
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61246?
The severity of CVE-2026-61246 is high, rated at 8.8 on the CVSS scale.
How do I fix CVE-2026-61246?
To fix CVE-2026-61246, upgrade your Oracle Platform Security for Java to the protected versions as specified by Oracle.
Who is affected by CVE-2026-61246?
CVE-2026-61246 affects users of Oracle Platform Security for Java in versions 12.2.1.4.0 and 14.1.2.0.0.
What type of attack can exploit CVE-2026-61246?
CVE-2026-61246 can be exploited by low privileged attackers with network access via HTTP.
What components are affected by CVE-2026-61246?
CVE-2026-61246 affects the Centralized Third-party Jars component of Oracle Fusion Middleware.