Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Oracle Corporation | Oracle Fusion Middleware Control | affected |
|
No data.
No data.
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
|
Tue, 20 Oct 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows physical access to compromise Oracle Fusion Middleware Control. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Fusion Middleware Control. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). | |
| First Time appeared |
Oracle
Oracle fusion Middleware Control |
|
| CPEs | cpe:2.3:a:oracle:fusion_middleware_control:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:fusion_middleware_control:14.1.2.0.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Oracle
Oracle fusion Middleware Control |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-10-20T21:26:07.758Z
Reserved: 2026-09-14T22:10:16.636Z
Link: CVE-2026-91467
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-20T22:20:50.440
Modified: 2026-10-20T22:20:50.440
Link: CVE-2026-91467
Redhat
No data.
OpenCVE Enrichment
No data.
No weakness.