ORACLE-CVE-2026-54518

Vulnerability Description:

Vulnerability in the Fleet Patching and Provisioning (jackson-databind) component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit vulnerability allows low privileged attacker having None privilege with network access via multiple protocols to compromise Fleet Patching and Provisioning (jackson-databind). Successful attacks of this vulnerability can result in takeover of Fleet Patching and Provisioning (jackson-databind). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).Vulnerability Description:

Vulnerability in the OPatch product of Oracle Global Lifecycle Management (component: Installer (jackson-databind)). Supported versions that are affected are 12.2.0.1.16-12.2.0.1.51. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise OPatch. Successful attacks of this vulnerability can result in takeover of OPatch. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).Vulnerability Description:

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer (jackson-databind)). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Global Lifecycle Management NextGen OUI Framework. Successful attacks of this vulnerability can result in takeover of Oracle Global Lifecycle Management NextGen OUI Framework.Vulnerability Description:

Vulnerability in the Oracle Spatial and Graph (jackson-databind) component of Oracle Database Server. Supported versions that are...