VDB

OSA-37581902

OSA-37581902 PUBLISHED CVSS 9.800000190734863 CRITICAL

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: Runtime Server (Apache Mina SSHD)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SSH to compromise Oracle Managed File Transfer. Successful attacks of this vulnerability can result in takeover of Oracle Managed File Transfer.

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
OracleOracle Managed File Transfer Version 12.2.1.4.0Oracle Managed File Transfer Version 12.2.1.4.0, Oracle Managed File Transfer Version 12.2.1.4.0

Timeline

  • Apr 24, 2026 CVE Published
Open in Interactive Console →
$ Console Community · 50/day Open console ›