CVE-2026-91222

Summary

This vulnerability allows low-privileged attackers with network access to take over the Oracle Business Process Management Suite through SOAP requests, potentially affecting multiple Oracle products due to scope change.

Exploitability

The vulnerability is easily exploitable with low privileges and requires only network access via SOAP, making it straightforward for attackers to compromise the system.

Blast radius

Successful exploitation could lead to complete takeover of the Oracle Business Process Management Suite and potentially impact other Oracle Fusion Middleware products due to the scope change.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Business Process Management Suite 14.1.2.0.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.