Threats Tagged 'cve-2026-46931'

CVE-2026-46949 is a critical vulnerability in Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without availability impact. Oracle has released a Critical Security Patch Update in June 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the security patches promptly to mitigate the risk. No known exploits in the wild have been reported yet.

CVE-2026-46931 is a high-severity vulnerability in Oracle Enterprise Asset Management versions 12.2.6 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security patches across multiple products. Oracle strongly recommends applying the patch promptly to mitigate the risk. No specific patch version is explicitly stated for this vulnerability in the advisory, so users should refer to the June 2026 Critical Security Patch Update documentation for patch availability and installation instructions.