CVE-2026-46947: High severity Oracle Oracle Advanced Outbound Telephony vulnerability
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Outbound Telephony. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Oracle Advanced Outbound Telephony (Oracle E-Business Suite)from your environment.If the Oracle Advanced Outbound Telephony component is not required, uninstall or disable it to eliminate the vulnerable attack surface.
- Compensating control
Restrict network access to Oracle Advanced Outbound Telephony so that it is not reachable over HTTP from untrusted networks. Use firewall rules, ACLs, or a WAF to allow HTTP access only from trusted management IPs or internal networks, or block HTTP entirely until a vendor fix is applied.
- Operational
Monitor application and web server logs for signs of exploitation or unusual activity targeting Oracle Advanced Outbound Telephony and investigate any suspicious events. Isolate affected hosts if compromise is suspected.
- Operational
Apply Oracle-supplied patches or updates for Oracle Advanced Outbound Telephony as soon as vendor fixes are published for this vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46947?
CVE-2026-46947 has a severity rating of high, with a CVSS score of 8.8.
How do I fix CVE-2026-46947?
To fix CVE-2026-46947, apply the latest security patches provided by Oracle for affected versions of Oracle Advanced Outbound Telephony.
Who is affected by CVE-2026-46947?
CVE-2026-46947 affects users of Oracle Advanced Outbound Telephony in Oracle E-Business Suite, specifically versions 12.2.3 to 12.2.15.
What is the potential impact of CVE-2026-46947?
The potential impact of CVE-2026-46947 includes unauthorized access and compromise of sensitive data due to exploitation by low privileged attackers over HTTP.
How can I determine if my system is vulnerable to CVE-2026-46947?
You can determine vulnerability to CVE-2026-46947 by checking if your system is running any supported versions of Oracle Advanced Outbound Telephony between 12.2.3 and 12.2.15.