Threats Tagged 'cve-2026-46898'

CVE-2026-46898 is a high-severity vulnerability in Oracle Enterprise Command Center Framework versions 15 and 16. It allows an unauthenticated attacker with network access via HTTPS to compromise the product, but requires human interaction from a person other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by the framework. The vulnerability has a CVSS 3.1 base score of 8.1, reflecting high confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update advisory recommending prompt application of security patches to mitigate this and other vulnerabilities. No specific patch or fix version is explicitly stated for this vulnerability in the advisory, so patch status is not yet confirmed. Oracle strongly advises applying the Critical Security Patch Update without delay and suggests network-level mitigations such as blocking required attack protocols and limiting privileges where feasible until patches are applied.