CVE-2026-46987: High severity Oracle Oracle Enterprise Manager Base Platform vulnerability
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46987?
The severity of CVE-2026-46987 is rated as high with a score of 7.7.
What are the affected versions for CVE-2026-46987?
The affected versions for CVE-2026-46987 are Oracle Enterprise Manager Base Platform versions 13.5 and 24.1.
How do I fix CVE-2026-46987?
To fix CVE-2026-46987, apply the latest security patches provided by Oracle for the affected versions.
Who can exploit CVE-2026-46987?
CVE-2026-46987 can be exploited by low privileged attackers with network access via HTTPS.
What components are affected by CVE-2026-46987?
CVE-2026-46987 affects the Application Service Level Management component of the Oracle Enterprise Manager Base Platform.