Threats Tagged 'cve-2026-46969'

CVE-2026-46969 is a high-severity vulnerability in Oracle Financials for EMEA, part of Oracle E-Business Suite. It affects version 12.2.3 and allows a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to full takeover of Oracle Financials for EMEA. The vulnerability has a CVSS 3.1 base score of 7.2, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged the issue in their June 2026 Critical Security Patch Update advisory and strongly recommends applying patches promptly. No explicit patch version or fix details are provided in the advisory excerpt, but the advisory emphasizes applying the Critical Security Patch Update to mitigate this and other vulnerabilities. Until patched, risk reduction may be possible by blocking required network protocols or restricting privileges, though these may impact functionality.