Threat Intelligence Database

CVE-2026-46971 is a high-severity vulnerability in Oracle HR Intelligence, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle HR Intelligence component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly stated patch availability or a specific fix for this product version in the advisory. Oracle strongly recommends applying Critical Security Patch Updates promptly to mitigate such vulnerabilities. Until patches are applied, risk reduction may be possible by blocking required network protocols or limiting privileges, though these may impact functionality.

CVE-2026-46970 is a high-severity vulnerability in Oracle HR Intelligence, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. Oracle strongly recommends applying the patch promptly to mitigate the risk. Until patched, risk reduction may be possible by blocking required network protocols or limiting privileges, though these may affect functionality.

CVE-2026-46922 is a high-severity vulnerability in Oracle HR Intelligence, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.2. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains multiple security fixes across Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate this risk. Until patched, risk reduction may be possible by restricting network protocols and limiting privileges, though these may affect functionality.