Threats Tagged 'cve-2026-46971'

CVE-2026-46971 is a high-severity vulnerability in Oracle HR Intelligence, part of Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle HR Intelligence component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly stated patch availability or a specific fix for this product version in the advisory. Oracle strongly recommends applying Critical Security Patch Updates promptly to mitigate such vulnerabilities. Until patches are applied, risk reduction may be possible by blocking required network protocols or limiting privileges, though these may impact functionality.

CVE-2026-46949 is a critical vulnerability in Oracle Advanced Outbound Telephony (part of Oracle E-Business Suite) versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without availability impact. Oracle has released a Critical Security Patch Update in June 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the security patches promptly to mitigate the risk. No known exploits in the wild have been reported yet.