Threats Tagged 'cve-2026-46915'

CVE-2026-46949 is a critical vulnerability in Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without availability impact. Oracle has released a Critical Security Patch Update in June 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the security patches promptly to mitigate the risk. No known exploits in the wild have been reported yet.

CVE-2026-46915 is a high-severity vulnerability in Oracle Complex Maintenance, Repair and Overhaul component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high impact on confidentiality, integrity, and availability. Exploitation is difficult and requires high attack complexity, but successful exploitation can lead to full compromise of the product and may affect additional Oracle products. Oracle has published a Critical Security Patch Update advisory recommending prompt patching and mitigation. No specific patch version is stated in the provided data. Mitigations include applying the Critical Security Patch Update as soon as possible and blocking network protocols required by the attack if patching is delayed. Removing unnecessary privileges may also reduce risk but could impact functionality. No known exploits in the wild have been reported at this time.