中文

// CVE · PUBLISHED 2026-06-17

CVE-2026-46946

Oracle Corporation / Oracle iSupport

9.1 · CVSS 3.1Critical

Description

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iSupport. While the vulnerability is in Oracle iSupport, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle iSupport. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-46978Oracle Corporation / Oracle SolarisCVSS 10.0
  • CVE-2026-46964Oracle Corporation / Oracle Universal Work QueueCVSS 9.9
  • CVE-2026-46963Oracle Corporation / Oracle Universal Work QueueCVSS 9.9
  • CVE-2026-46949Oracle Corporation / Oracle Advanced Outbound TelephonyCVSS 9.1
  • CVE-2026-46945Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46944Oracle Corporation / Oracle iSupportCVSS 9.1
  • CVE-2026-46933Oracle Corporation / Oracle Applications ManagerCVSS 9.9
  • CVE-2026-46930Oracle Corporation / Oracle In-Memory Cost Management for Discrete IndustriesCVSS 9.1

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.