OSA-38543443 — Vulnetix

OSA-38543443 PUBLISHED

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_security (ModSecurity)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle HTTP Server.

Timeline

Jan 20, 2026 CVE Published

References

Oracle CPU cpujan2026 — CVE-2025-47947 advisory

Open in Interactive Console →