The Vulnerability in the Messaging Enabler component of Oracle Service Delivery Platform allows a high‑privileged attacker who can reach the platform over HTTP to compromise the service. The flaw arises from improper access control, enabling the attacker to read or modify critical data and potentially gain complete access to all data exposed by the platform. The CVSS vector shows a network attack, low complexity, high privileges required, no user interaction, and a scope change, resulting in a 6.8 base score that highlights confidentiality impact.

The affected vendor is Oracle Corporation’s Service Delivery Platform. Versions 12.2.1.4.0 and 14.1.2.0.0 are vulnerable. The problem occurs in the Messaging Enabler component of these releases.

The CVSS 3.1 base score of 6.8 indicates a moderate severity vulnerability. The EPSS score is not available, and the issue is not listed in the CISA KEV catalog, suggesting no publicly known exploits yet. Nonetheless, the vulnerability can be exploited over HTTP without user interaction and requires only high‑privileged access, which may be attainable on compromised or poorly secured installations. The scope change indicates that the compromise could affect other Oracle products that rely on the Service Delivery Platform.