Oracle Service Bus vulnerabilities

6 known vulnerabilities in Oracle Service Bus from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Service Bus: Improper Access Control

  CVE-2026-87420Oct 20, 2026Oracle

  Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac

• 8.8 High severity

  Oracle Service Bus: Missing Authentication for Critical Functionality

  CVE-2026-87419Oct 20, 2026Oracle

  Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.5 High severity

  Oracle Service Bus: Uncontrolled Resource Consumption

  CVE-2026-87369Oct 20, 2026Oracle

  Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.8 High severity

  Oracle Service Bus: Improper Access Control

  CVE-2026-87364Oct 20, 2026Oracle

  Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 8.8 High severity

  Oracle Service Bus: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87359Oct 20, 2026Oracle

  Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 7.5 High severity

  Oracle Service Bus: Missing Authorization

  CVE-2024-21246Oct 15, 2024Oracle

  Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP