Threat Intelligence Database

CVE-2026-46923 is a high-severity vulnerability in Oracle Public Sector Financials (International) component of Oracle E-Business Suite Authorization. It affects versions 12.2.3 through 12.2.15 and allows a high privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high impact on confidentiality, integrity, and availability. Although exploitation is difficult, successful attacks can lead to full compromise of Oracle Public Sector Financials (International). The vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Patch Update advisory in July 2026 covering multiple vulnerabilities, but no specific patch or remediation level is confirmed for this CVE in the advisory. Customers are strongly advised to apply Oracle patches promptly as per Oracle's general security guidance.

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials (International). Successful attacks of this vulnerability can result in takeover of Oracle Public Sector Financials (International). CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Public Sector Financials (International). While the vulnerability is in Oracle Public Sector Financials (International), attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Public Sector Financials (International) accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).