Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows l…

Critical vulnerability in Oracle REST Data Services Core component affecting versions 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attackers with network access via HTTPS to compromise the service. The vulnerability has a CVSS 3.1 Base Score of 9.9 with high impact on confidentiality, integrity, and availability. Successful exploitation can result in complete takeover of Oracle REST Data Services. The vulnerability may significantly impact additional products due to scope change. Attack vector is network-based with low attack complexity and no user interaction required.