Threats affecting pkg:maven/com.oracle/ProjectPortfolioAnalysis

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.4%	CVE-2026-46961Oracle Project Portfolio Analysis · Missing Authentication High8.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46961 Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Successful attacks of this vulnerability can result in takeover of Oracle Project Portfolio Analysis. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-306	CVE Database V5	2026-06-16
High	7.2	EPSS 0.5%	CVE-2026-46960Oracle Project Portfolio Analysis · Improper Access Control High7.2EPSS 0.5%2026-06-16CVE Database V5CVE-2026-46960 Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Successful attacks of this vulnerability can result in takeover of Oracle Project Portfolio Analysis. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-284	CVE Database V5	2026-06-16

Page 1 of 1