CVE-2026-46984: Medium severity Oracle Enterprise Manager Base Platform vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

3 affected components

Oracle Enterprise Manager Base Platform=13.5, =24.1

Oracle Enterprise Manager Base Platform=13.5.0.0

Oracle Enterprise Manager Base Platform=24.1.0.0.0

Event History

Jul 21, 2026

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverity

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-46984?

The severity of CVE-2026-46984 is rated as medium with a score of 5.3.

How do I fix CVE-2026-46984?

To fix CVE-2026-46984, users should upgrade to a patched version of Oracle Enterprise Manager Base Platform if available.

What are the affected versions for CVE-2026-46984?

The affected versions for CVE-2026-46984 are 13.5 and 24.1 of the Oracle Enterprise Manager Base Platform.

Who can exploit CVE-2026-46984?

CVE-2026-46984 can be easily exploited by an unauthenticated attacker with network access via HTTPS.

What component of Oracle is impacted by CVE-2026-46984?

The component impacted by CVE-2026-46984 is the Agent Next Gen within the Oracle Enterprise Manager Base Platform.