Threats Tagged 'cve-2026-46960'

CVE-2026-46960 is a high-severity vulnerability in Oracle Project Portfolio Analysis, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory, recommending prompt patch application. No explicit patch version or fix details are provided in the advisory content, but Oracle strongly urges applying the Critical Security Patch Update to mitigate the risk. Until patches are applied, risk reduction may be possible by blocking required network protocols or limiting privileges, though these may affect functionality.