VulnSocial

CVE-2026-47056Patch(oracle / data_integrator)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch oracle data_integrator systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Data Integrator. While the vulnerability is in Oracle Data Integrator, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Data Integrator. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

oracle CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • data_integrator

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-07-21); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
oracle
Products
data_integrator

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-21: 1Mentions · 2026-07-24: 1Mentions · 2026-08-29: 1Patch / Workaround · 2026-07-21: 1Patch / Workaround · 2026-07-24: 1Technical Details · 2026-07-24: 1Technical Details · 2026-08-29: 107-2107-2408-29
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-211
Patch1
2026-07-241
Patch1
2026-08-291
General1
Full discourse3 posts
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-47056 — CVSS 10/10 ██████████ Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service). Supported... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/DhSgp7jo06

    Post summary

    The tweet announces a critical Oracle Data Integrator vulnerability (CVSS 10/10) and notes that a patch is now available, without providing PoC, exploit code, exploitation status, or technical details.

    1001079
    69 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-47056: Oracle Data Integrator REST Service Missing Authentication Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04vNy5K0

    Post summary

    The article announces Oracle Data Integrator REST Service authentication bypass (CVE-2026-47056) and discusses business implications, but provides no concrete technical details beyond the missing-authentication description or any exploit or mitigation guidance.

    0000041
    36 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🔗 Oracle Data Integrator: CVE-2026-47056 hits the REST Service — CVSS 10, no auth, full C/I/A compromise. Versions 12.2.1.4.0 & 14.1.2.0.0 affected. Patch via July 2026 CPU now. #cybersecurity #ciso #cto #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-47056?utm_campaign=x https://t.co/BWUx5UVkVU

    Post summary

    Oracle Data Integrator is vulnerable to CVE-2026-47056 with a high CVSS score and no authentication required; a patch is available through the July 2026 CPU release.

    00000105
    870 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Apporacledata_integrator12.2.1.4.0--
Apporacledata_integrator14.1.2.0.0--

Explore more

Back to dashboardoracle CVEsdata_integrator vulnerabilities