中文

// CVE · PUBLISHED 2026-06-17

CVE-2026-46944

Oracle Corporation / Oracle iSupport

9.1 · CVSS 3.1Critical

Description

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. While the vulnerability is in Oracle iSupport, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-46963Oracle Corporation / Oracle Universal Work QueueCVSS 9.9
  • CVE-2026-46949Oracle Corporation / Oracle Advanced Outbound TelephonyCVSS 9.1
  • CVE-2026-46946Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46945Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46933Oracle Corporation / Oracle Applications ManagerCVSS 9.9
  • CVE-2026-46930Oracle Corporation / Oracle In-Memory Cost Management for Discrete IndustriesCVSS 9.1
  • CVE-2026-46919Oracle Corporation / Siebel CRM Cloud ApplicationsCVSS 9.8
  • CVE-2026-46918Oracle Corporation / Oracle Process Manufacturing Product DevelopmentCVSS 9.9

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.