Service Delivery Platform vulnerabilities

26 known vulnerabilities in Service Delivery Platform from Oracle. 26 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

26vulnerabilities

22critical

4high

0exploited

9.6average CVSS score

Latest first

9.8 Critical severity
Service Delivery Platform: Improper Authentication
CVE-2026-83151Sep 15, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Improper Authentication
CVE-2026-83000Sep 15, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.9 Critical severity
Service Delivery Platform: Improper Access Control
CVE-2026-82999Sep 15, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network
9.9 Critical severity
Service Delivery Platform: Improper Access Control
CVE-2026-82998Sep 15, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network
9.9 Critical severity
Service Delivery Platform: Improper Access Control
CVE-2026-82997Sep 15, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network
9.6 Critical severity
Service Delivery Platform: Improper Access Control
CVE-2026-60861Aug 18, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network
8.7 High severity
Service Delivery Platform: Improper Access Control
CVE-2026-60860Aug 18, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60442Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60441Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
7.7 High severity
Service Delivery Platform: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-60440Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network
10.0 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60389Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60388Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60387Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60386Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60385Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60384Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
8.4 High severity
Service Delivery Platform: Improper Access Control
CVE-2026-60383Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to
7.5 High severity
Service Delivery Platform: Uncontrolled Resource Consumption
CVE-2026-60382Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.9 Critical severity
Service Delivery Platform: Improper Access Control
CVE-2026-60381Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60380Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
10.0 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60379Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60378Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.9 Critical severity
Service Delivery Platform: Improper Access Control
CVE-2026-60377Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60376Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60375Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Service Delivery Platform: Missing Authentication for Critical Functionality
CVE-2026-60374Jul 21, 2026Oracle
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network