Threats Tagged 'cve-2026-46793'

CVE-2026-46793 is a critical vulnerability in Oracle Fusion Middleware Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via HTTP to compromise the Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Attacks exploiting this flaw may also affect additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, strongly recommending prompt patch application. Until patched, risk can be reduced by blocking required network protocols and limiting privileges. No explicit patch version is stated in the advisory, so users should consult Oracle's June 2026 Critical Security Patch Update documentation for exact patch details.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.