Oracle Fusion Middleware critical vulnerabilities

Multiple critical vulnerabilities have been identified in Oracle Fusion Middleware, with some reaching a CVSS score of 10.0. The vulnerabilities allow for unauthenticated remote code execution, unauthorized data access, data modification, and privilege escalation. While there is currently no evidence of active exploitation, the NCSC assesses both the likelihood of exploitation and the potential impact as high. Users are advised to apply the latest security updates provided by Oracle immediately.

Impact

Successful exploitation allows unauthenticated attackers to execute arbitrary code, gain unauthorized access to sensitive data, modify or delete information, and disrupt system operations. The severity is elevated by the potential for privilege escalation, granting attackers greater control over the targeted systems.

Recommendation

• Inventory all systems running Oracle Fusion Middleware to identify affected versions.
• Apply the latest security patches and updates provided by Oracle immediately.
• If the version status is unknown, consult with internal IT teams or service providers to audit current deployments.
• Review official Oracle security documentation for specific installation instructions and hardening guidance.