Threats Tagged 'cve-2026-46812'

CVE-2026-46812 is a medium severity vulnerability in Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the product by leveraging human interaction from a third party. Successful exploitation can lead to unauthorized read and modification (update, insert, delete) of some Oracle Access Manager accessible data. The vulnerability affects confidentiality and integrity but does not impact availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, strongly recommending patch application. No specific patch link is provided in the input, but Oracle advises applying the Critical Security Patch Update promptly to mitigate risk.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.