Live › vulnerability › CVE-2026-83398
Go to dashboardOracle Data Integrator's Data Transforms component has a flaw that lets an unauthenticated attacker over the network reach its data via HTTP. Successful attacks can read critical data and modify, insert or delete some of it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of Oracle Data Integrator in the affected versions whose HTTP interface is reachable by an attacker, since the flaw needs no login. Teams not running Oracle Data Integrator, or running other versions, are not affected per the sources. Internal-only deployments are less exposed but the sources do not say how the flaw behaves behind a network boundary.
No product ranges from the sources yet.
12.2.1.4.0 and 14.1.2.0.0, the affected releases named in the advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Data Integrator accessible data as well as unauthorized update, insert or delete access to some of Oracle Data Integrator accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-83398")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.