中文

// CVE · PUBLISHED 2026-06-17

CVE-2026-46933

Oracle Corporation / Oracle Applications Manager

9.9 · CVSS 3.1Critical

Description

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Manager. While the vulnerability is in Oracle Applications Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Applications Manager. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-46949Oracle Corporation / Oracle Advanced Outbound TelephonyCVSS 9.1
  • CVE-2026-46946Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46945Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46944Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46930Oracle Corporation / Oracle In-Memory Cost Management for Discrete IndustriesCVSS 9.1
  • CVE-2026-46919Oracle Corporation / Siebel CRM Cloud ApplicationsCVSS 9.8
  • CVE-2026-46918Oracle Corporation / Oracle Process Manufacturing Product DevelopmentCVSS 9.9
  • CVE-2026-46913Oracle Corporation / JD Edwards EnterpriseOne ToolsCVSS 9.3

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.