Dashboard / CVE-2026-62616

CVE-2026-62616

HIGH
MEDIUM Priority: 0.02 BB Relevance: 74/100
Published: 2026-08-18 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Changed
C: None
I: Low
A: Low

Description

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Reports Developer. While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Reports Developer accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Reports Developer. CVSS 3.1 Base Score 7.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
oracle reports_developer 12.2.1.19.0

References & Advisories (1)

Bug Bounty Relevance

74 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.2 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L

EPSS — Exploitation Probability

0.34%
Raw Score 0.003400
Percentile 27.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00340
2026-10-28
0.00340

Intelligence Sources

nvd ref →

External Links