The vulnerability resides within the Fabric Layer of Oracle SOA Suite, a component of Oracle Fusion Middleware. An attacker who has low‑privileged access and can reach the system over HTTP can trigger the flaw, allowing the attacker to fully compromise the platform. This results in a loss of confidentiality, integrity, and availability for the entire SOA Suite. The description implies a weak access control that the attacker can exploit, which is inferred because the text states the attacker’s low privilege and the ease of exploitation without requiring elevated rights.

This issue affects Oracle SOA Suite releases 12.2.1.4.0 and 14.1.2.0.0, both of which are supported by Oracle. The affected component is the Fabric Layer, which is part of the broader Oracle Fusion Middleware stack.

The CVSS 3.1 base score of 8.8 indicates high severity, with an attack vector over the network, low complexity, low privilege, no user interaction, and high impacts in confidentiality, integrity, and availability. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog, but the CVSS vector suggests that an attacker with network access can exploit it quickly. The lack of a documented exploit does not change the risk profile because the required conditions are readily satisfiable via standard HTTP interactions with the exposed endpoints.