Threats Tagged 'cve-2026-46810'

CVE-2026-46810 is a medium severity vulnerability in Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via IIOP to perform unauthorized read, update, insert, or delete operations on some accessible data. The vulnerability impacts confidentiality and integrity but not availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which provides patches for affected products. Customers are strongly advised to apply these patches promptly to mitigate the risk. Until patches are applied, risk reduction may be possible by blocking required network protocols or restricting privileges, but these may affect functionality. No known exploits in the wild have been reported at this time.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.