CVE-2026-83396

Summary

Oracle Data Integrator has an unauthenticated RMI vulnerability in its Console/Repository Explorer component that allows remote attackers to fully compromise the system with high impact on confidentiality, integrity, and availability.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing network-based attackers to gain full control of Oracle Data Integrator through RMI connections.

Blast radius

Successful exploitation could lead to complete takeover of Oracle Data Integrator systems, potentially affecting data integration workflows and exposing sensitive enterprise data across the organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Data Integrator 12.2.1.4.0 or 14.1.2.0.0 to address this vulnerability, as these are the affected versions mentioned in the CVE description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.