Oracle REST Data Services Core Unauthenticated Data Manipulation Vulnerability

A vulnerability exists in Oracle REST Data Services, specifically in the Core component, affecting versions 24.2.0 prior to 26.1.0. This vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the application. Successful exploitation could lead to unauthorized modifications, including updates, inserts, or deletions, of certain accessible data within Oracle REST Data Services.

Impact

Exploitation of this vulnerability could result in unauthorized changes to some data accessible through Oracle REST Data Services.

Remediation

Users can apply the patch available through the Oracle Critical Security Patch Update program. Instructions for applying this patch can be found in the Oracle REST Data Services patch availability document on My Oracle Support.