Vulnerability in Oracle Planning and Budgeting Cloud Service by Oracle

CVE-2026-21922

What is CVE-2026-21922?

The vulnerability identified in Oracle Planning and Budgeting Cloud Service, specifically within the EPM Agent component, allows a high-privileged attacker with access to the infrastructure to potentially compromise the service. This flaw enables unauthorized actions such as the creation, deletion, or modification of critical data within the system. Notably, successful exploitation requires human interaction by someone other than the attacker. It is crucial to update the EPM Agent to mitigate this risk and protect sensitive information.

References