CVE-2026-60999 in Data Integrator
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Data Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability exists within Oracle Data Integrator version 14.1.2.0.0, specifically within its REST service component of Oracle Fusion Middleware. The flaw represents a critical security weakness that enables unauthenticated attackers to gain unauthorized access to the system through HTTPS network connections. The vulnerability's exploitability is classified as easily accessible, meaning that threat actors require minimal technical expertise or resources to successfully compromise the target system. This presents a significant risk to organizations relying on Oracle Data Integrator for their data integration processes.
The technical nature of this vulnerability stems from insufficient authentication mechanisms within the REST service interface, allowing attackers to bypass normal access controls without providing valid credentials. The CVSS 3.1 scoring of 9.8 indicates the highest severity level with complete impacts across confidentiality, integrity, and availability dimensions. This means that successful exploitation could result in full system compromise where attackers gain complete control over Oracle Data Integrator operations. The attack vector AV:N indicates network-based access is required, while AC:L shows low attack complexity, making this vulnerability particularly dangerous as it can be exploited remotely without requiring physical access or specialized privileges.
The operational impact of this vulnerability extends beyond simple data theft, as it enables complete system takeover capabilities that could disrupt business operations and compromise sensitive enterprise data. Organizations using Oracle Data Integrator for critical data integration tasks face potential exposure to data breaches, system downtime, and unauthorized modifications to data processing workflows. The availability impact means that attackers could potentially render the system unusable through various attack vectors including denial of service conditions or complete system compromise. The confidentiality impact indicates that any sensitive information processed by Oracle Data Integrator could be accessed by unauthorized parties, while integrity impact suggests that data could be modified or corrupted during exploitation attempts.
Organizations should immediately implement mitigations including network segmentation to restrict access to the affected REST services, deployment of web application firewalls to monitor and filter traffic, and implementation of additional authentication layers where possible. The vulnerability aligns with CWE-287 which addresses improper handling of authentication tokens and credentials, and relates to ATT&CK technique T1190 for exploiting vulnerabilities in remote services. Security teams should also consider implementing network monitoring solutions to detect anomalous access patterns and establish incident response procedures to address potential exploitation attempts. Given the high severity rating, organizations must prioritize patching efforts and consider temporary workarounds such as disabling the vulnerable REST service until official patches are applied.
Additional defensive measures include conducting comprehensive security assessments of all Oracle Fusion Middleware installations to identify similar vulnerabilities, implementing robust network access controls to limit exposure, and establishing continuous monitoring for exploitation attempts. The vulnerability demonstrates the importance of maintaining current security patches and following secure configuration practices for enterprise middleware solutions. Organizations should also review their incident response procedures to ensure readiness for potential compromise scenarios involving critical data integration platforms. Regular security awareness training for system administrators can help identify suspicious network activities that may indicate exploitation attempts against such vulnerabilities.