Loading vulnerability…
Oracle Data Integrator REST Service Unauthenticated Remote Takeover
CVE-2026-47056 is an easily exploitable vulnerability in the REST Service component of Oracle Data Integrator, part of Oracle Fusion Middleware. It affects Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access over HTTP can exploit the flaw to compromise the Oracle Data Integrator instance. Oracle assigned CVSS v3.1 10.0 with network attack vector, low attack complexity, no privileges required, no user interaction, and changed scope.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation enables complete takeover of Oracle Data Integrator, resulting in high confidentiality, integrity, and availability impact. The changed-scope assessment indicates that connected or dependent products may also be significantly affected. An attacker could gain unauthorized access to data and disrupt, modify, or delete organizational information and business processes supported by the compromised integration platform.
If you can’t patch tonight, do this now.
Until patching is complete, restrict HTTP network access to Oracle Data Integrator REST Service to strictly required and trusted sources. Remove public exposure, enforce network segmentation and access-control policies, and monitor the service and connected environments for suspicious unauthenticated activity or signs of compromise.
Patch, then assume compromise.
Apply Oracle's security update for CVE-2026-47056 from the July 2026 Critical Patch Update. Identify all Oracle Data Integrator deployments running affected versions 12.2.1.4.0 or 14.1.2.0.0 and update them to Oracle-provided fixed releases or patch levels as soon as operationally feasible.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.