CVE-2026-46770

Name of the Vulnerable Software and Affected Versions Oracle Application Development Framework (ADF) version 12.2.1.4.0 Oracle Application Development Framework (ADF) version 14.1.2.0.0

Description An issue exists in the Security Framework component of the Oracle Application Development Framework (ADF) within Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can compromise the framework, provided there is human interaction from a person other than the attacker. This flaw can lead to unauthorized read access to a subset of data, as well as unauthorized update, insert, or delete access to some accessible data. The impact may extend beyond the ADF to other products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.