CVE-2024-21133

CVE-2024-21133 affects Oracle Reports Developer (Servlet) in Oracle Fusion Middleware. The root cause is insufficient input validation in the Servlet component, impacting versions 12.2.1.4.0 through 12.2.1.19.0. An unauthenticated attacker with network access via HTTP can cause unauthorized read,...

CVE-2019-2413

CVE-2019-2413 affects Oracle Fusion Middleware’s Oracle Reports Developer component (subcomponent: Valid Session) in version 12.2.1.3. The flaw allows an unauthenticated attacker with network access over HTTP to compromise Oracle Reports Developer, with human interaction required for exploitation...

CVE-2020-2533

CVE-2020-2533 affects Oracle Fusion Middleware’s Oracle Reports Developer (component: Security and Authentication) with affected versions 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker who can reach Oracle Reports Developer over HTTP to compromise data, with the a...

CVE-2020-2534

CVE-2020-2534 affects Oracle Reports Developer (Security and Authentication) within Oracle Fusion Middleware. Affected: 12.2.1.3.0 and 12.2.1.4.0. Description: unauthenticated network access via HTTP can compromise Oracle Reports Developer; some data may be updated, inserted, deleted, or read. CV...

CVE-2026-70675

Oracle Reports Developer 14.1.2.0.0 (Oracle Fusion Middleware, Security and Authentication component) is vulnerable to unauthenticated remote HTTP attacks leading to full system takeover. CVSS 3.1 scores 8.1 (HIGH). Oracle's August 2026 CPU patches this issue; NCSC recommends prioritizing the upd...

CVE-2026-62615

CVE-2026-62615 is a vulnerability in the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), affecting version 12.2.1.19.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to achieve full takeover of the product, with a scope...

CVE-2026-62609

CVE-2026-62609 affects Oracle Reports Developer 12.2.1.19.0 (Security and Authentication component). An unauthenticated remote attacker can exploit it over TCP to fully compromise the product (CVSS 9.8, C/I/A High). No root cause, exploit, or patch details are provided in the documents; refer to ...

CVE-2026-62616

Oracle Reports Developer 12.2.1.19.0 (Oracle Fusion Middleware, component: Security and Authentication) contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access via SMTP to compromise the product. Due to a scope change , attacks may significantly im...

CVE-2026-62627

Oracle Reports Developer (Oracle Fusion Middleware component: Security and Authentication) at version 12.2.1.19.0 has a high-severity (CVSS 7.1) flaw exploitable via HTTP by a low-privileged remote attacker, enabling unauthorized access to critical data and limited write access to accessible data...

CVE-2026-62635

Oracle Fusion Middleware Reports Developer 14.1.2.0.0 has a critical unauthenticated HTTP-based vulnerability in its Security and Authentication component, allowing remote attackers to fully compromise the application (CVSS 9.8). No exploitation evidence is provided. Patch details are not include...

CVE-2026-62633

Oracle Fusion Middleware's Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has an easily exploitable unauthenticated HTTP vulnerability rated CVSS 9.8 (C/I/A High), enabling full product takeover. Oracle's August 2026 security advisory (cspuaug2026.html) addresses this...

CVE-2026-62632

CVE-2026-62632 is a critical vulnerability in Oracle Reports Developer (Oracle Fusion Middleware), specifically in the Security and Authentication component. The affected version is 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to achieve ful...

CVE-2026-62610

Oracle Fusion Middleware's Oracle Reports Developer (component: Security and Authentication) version 12.2.1.19.0 is critically vulnerable (CVSS 9.1) — an unauthenticated remote attacker can exploit it via HTTP to achieve unauthorized read/write access to all accessible data. No exploit code or in...

CVE-2026-62631

Affected product is Oracle Reports Developer 14.1.2.0.0, component Security and Authentication. Unauthenticated attacker on the local physical network segment can exploit it to fully compromise the application (C/I/A all HIGH, CVSS 8.8). Oracle released patches in the August 2026 Critical Patch U...

CVE-2026-62614

Oracle Reports Developer (component: Security and Authentication) in Oracle Fusion Middleware version 12.2.1.19.0 is vulnerable to an easily exploitable unauthenticated HTTP attack, enabling full product compromise with CVSS 9.8 Critical (C/I/A all High). No exploit code is provided in the docume...

CVE-2026-62617

CVE-2026-62617 is a critical vulnerability (CVSS 3.1: 9.8 ) in Oracle Reports Developer 12.2.1.19.0 (Oracle Fusion Middleware), specifically in the Security and Authentication component. An unauthenticated attacker with network access via UDP can exploit this to achieve full takeover of the produ...

CVE-2026-62636

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, remotely exploitable SOAP attack (CVSS 8.6) yielding unauthorized data access, modification, and partial DoS. Oracle's August 2026 Critical Patch Update addresses it; apply patches per...

CVE-2026-62621

CVE-2026-62621 is a critical (CVSS 9.8) flaw in Oracle Fusion Middleware's Oracle Reports Developer (component: Security and Authentication), version 12.2.1.19.0. An unauthenticated remote attacker via TCP can fully compromise the product (confidentiality, integrity, and availability), resulting ...

CVE-2026-62625

CVE-2026-62625 affects Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can exploit this vulnerability to gain complete access to all accessible data , perform unauthorized updates, ...

CVE-2026-62626

Oracle Reports Developer 12.2.1.19.0 (component: Security and Authentication) is vulnerable to an unauthenticated, network-accessible HTTP exploit allowing full system takeover (CVSS 9.8). Oracle's August 2026 CPU addresses this; no public exploit code is documented. Organizations running affecte...

CVE-2026-62630

Oracle Reports Developer (component: Security and Authentication) in Oracle Fusion Middleware version 14.1.2.0.0 is affected by a CVSS 9.8 Critical vulnerability. An unauthenticated remote attacker can exploit it over TCP to fully compromise the application (confidentiality, integrity, and availa...

CVE-2026-62624

CVE-2026-62624 is a critical vulnerability in Oracle Reports Developer (Oracle Fusion Middleware), specifically in the Security and Authentication component. The affected supported version is 12.2.1.19.0 . An unauthenticated attacker with network access via IIOP can exploit this vulnerability to ...

CVE-2026-62634

A critical vulnerability (CVSS 9.8) in Oracle Reports Developer 14.1.2.0.0's Security and Authentication component allows an unauthenticated attacker with network access via CORBA to fully compromise the product. Oracle's August 2026 security alert (referenced in CVE details) provides the officia...

CVE-2026-70669

The vulnerability affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication) in Oracle Fusion Middleware. An unauthenticated attacker with HTTP network access can exploit it (CVSS 9.8, CRITICAL) to fully compromise the product (confidentiality, integrity, availability). ...

CVE-2026-62618

Oracle Reports Developer (component: Security and Authentication, version 12.2.1.19.0) contains a critical vulnerability (CVSS 9.3) exploitable by an unauthenticated, network-adjacent attacker via HTTP, enabling unauthorized access to all accessible data and limited write capabilities. The scope-...

CVE-2026-70670

Oracle Fusion Middleware Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.6 flaw exploitable by an unauthenticated attacker on the same physical network segment, enabling full product takeover with scope change affecting additional products. Oracle's Augu...

CVE-2026-70671

CVE-2026-70671 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). A low-privileged remote attacker via HTTP can read, modify, or delete critical data. CVSS 3.1 base score is 8.1 (HIGH). Oracle's August 2026 Critical Patch Update addresses this; no exploit code i...

CVE-2026-62613

CVE-2026-62613 affects the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware), version 12.2.1.19.0 . An unauthenticated attacker with access to the adjacent network segment can exploit this vulnerability with low complexity to compromise the product. Due ...

CVE-2026-62619

An unauthenticated, network-accessible HTTP attack against the Security and Authentication component of Oracle Reports Developer (Oracle Fusion Middleware 12.2.1.19.0) can result in full product takeover (C/I/A impacts), rated CVSS 8.8 HIGH. Exploitation requires human interaction. No exploit cod...

CVE-2026-62629

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) is vulnerable to an unauthenticated, network-accessible attack via HTTP. A remote attacker can achieve full confidentiality, integrity, and availability compromise — unauthorized data read/write and complete DoS. CVSS 9.4...

CVE-2026-62640

Oracle Reports Developer (Fusion Middleware component: Security and Authentication, affected version 14.1.2.0.0) has an easily exploitable flaw reachable via IIOP by unauthenticated network attackers, enabling full product takeover with CVSS 9.8; Oracle's August 2026 CPU advisory provides patch d...

CVE-2026-70668

Oracle Reports Developer 14.1.2.0.0 has a critical flaw in its Security and Authentication component. An unauthenticated remote attacker can exploit it via SOAP to read, modify, or delete all accessible Oracle Reports data. CVSS 9.1 (C:H/I:H/A:N). No specific patch version is provided; Oracle's A...

CVE-2026-70673

Oracle Reports Developer 14.1.2.0.0 (Oracle Fusion Middleware, Security and Authentication component) has a critical vulnerability exploitable by an unauthenticated attacker over HTTP, yielding CVSS 9.3 (C:H/I:L, scope change). Impact includes unauthorized read access to all product data and limi...

CVE-2026-62608

Oracle Reports Developer 12.2.1.19.0 (Fusion Middleware) has a critical Security and Authentication flaw exploitable via network-accessible CORBA with low privileges, enabling full takeover. Oracle published advisory CSPAug2026; apply Oracle's patch immediately and restrict CORBA access to truste...

CVE-2026-62612

Oracle Fusion Middleware's Oracle Reports Developer (version 12.2.1.19.0), component Security and Authentication, is vulnerable to low-privileged HTTP attackers achieving full product compromise (C/I/A impact). CVSS 8.8 HIGH. No exploitation evidence provided; Oracle's August 2026 advisory refere...

CVE-2026-62620

Oracle Reports Developer 12.2.1.19.0 (Oracle Fusion Middleware) has an easily exploitable flaw in the Security and Authentication component. An unauthenticated remote attacker via HTTP can compromise the service and access critical data, with scope change potentially affecting additional products...

CVE-2026-70674

CVE-2026-70674 affects Oracle Reports Developer 14.1.2.0.0 (component: Security and Authentication). An unauthenticated attacker with access to the physical communication segment can fully compromise the product (CVSS 8.8 HIGH). No exploit details are provided; refer to Oracle's August 2026 CPU a...

CVE-2026-62611

A critical (CVSS 9.8) unauthenticated, network-accessible vulnerability in the Security and Authentication component of Oracle Reports Developer 12.2.1.19.0 via IIOP allows full system compromise. Oracle's August 2026 CPU advisory is the primary reference; no public exploit details are provided i...

CVE-2026-62628

Oracle Fusion Middleware Reports Developer 12.2.1.19.0 (Security and Authentication component) has an unauthenticated, network-exploitable flaw (CVSS 8.6, HIGH) allowing unauthorized access to all accessible data. Oracle's August 2026 CPU advisory is referenced for patch details. No exploit code ...

CVE-2026-62638

Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component) has a critical CVSS 9.1 flaw: unauthenticated remote attackers via HTTP can modify/delete data and crash the service (complete DoS). No exploit details provided. Patch status is not specified in the documents. Monitor Ora...

CVE-2026-62622

An unauthenticated attacker with network access via IIOP can fully compromise Oracle Reports Developer (component: Security and Authentication) in affected version 12.2.1.19.0, yielding complete confidentiality, integrity, and availability impact (CVSS 9.8 Critical). No patch or exploit details a...

CVE-2026-62623

CVE-2026-62623 affects Oracle Reports Developer (component: Security and Authentication) in Oracle Fusion Middleware version 12.2.1.19.0. An unauthenticated attacker with physical-segment access can take over the application; CVSS 3.1 score 8.8 (HIGH). No exploitation evidence provided. Patch det...

CVE-2026-62637

Oracle Fusion Middleware Reports Developer 14.1.2.0.0 has a critical (CVSS 9.3) Security and Authentication flaw allowing unauthenticated attackers on the local network segment to compromise the system, with scope change affecting additional products and enabling full confidentiality and integrit...

CVE-2026-62639

CVE-2026-62639 is a critical vulnerability in Oracle Reports Developer (Oracle Fusion Middleware), specifically in the Security and Authentication component, affecting version 14.1.2.0.0 . An unauthenticated attacker with network access via CORBA can exploit this flaw to achieve full takeover of ...

CVE-2026-70672

Affected product: Oracle Reports Developer 14.1.2.0.0 (Security and Authentication component). Root cause: an unauthenticated, network-accessible HTTP flaw (CVSS 7.4 HIGH) allows unauthorized creation, deletion, or modification of all accessible data and full data disclosure. Remediation: Oracle'...