Oracle Managed File Transfer vulnerabilities

7 known vulnerabilities in Oracle Managed File Transfer from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  Oracle Managed File Transfer: Improper Access Control

  CVE-2026-83030Sep 15, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 9.6 Critical severity

  Oracle Managed File Transfer: Improper Access Control

  CVE-2026-83029Sep 15, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 9.9 Critical severity

  Oracle Managed File Transfer: Improper Access Control

  CVE-2026-61003Aug 18, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 8.8 High severity

  Oracle Managed File Transfer: Missing Authentication for Critical Functionality

  CVE-2026-60549Jul 21, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 9.9 Critical severity

  Oracle Managed File Transfer: Improper Access Control

  CVE-2026-60547Jul 21, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 8.8 High severity

  Oracle Managed File Transfer: Missing Authentication for Critical Functionality

  CVE-2026-60545Jul 21, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 9.9 Critical severity

  Oracle Managed File Transfer: Missing Authentication for Critical Functionality

  CVE-2026-60537Jul 21, 2026Oracle

  Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with netw