Oracle REST Data Services vulnerabilities

8 known vulnerabilities in Oracle REST Data Services from Oracle. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle REST Data Services: Improper Access Control

  CVE-2026-91610Oct 20, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Succe

• 7.7 High severity

  Oracle REST Data Services: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101494Oct 20, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. While th

• 10.0 Critical severity

  Oracle REST Data Services: Improper Access Control

  CVE-2026-46840May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data

• 9.9 Critical severity

  Oracle REST Data Services: Improper Access Control

  CVE-2026-46839May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While t

• 7.5 High severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-46829May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Su

• 9.9 Critical severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-46775May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. While t

• 8.1 High severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-35277May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Success

• 7.9 High severity

  Oracle REST Data Services: Uncontrolled Resource Consumption

  CVE-2026-35266May 28, 2026Oracle

  Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Succe