Exploit in Oracle Enterprise Manager Base Platform Metadata Plugin
CVE-2026-46853
9.6CRITICAL
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 16 June 2026
What is CVE-2026-46853?
A vulnerability exists in the Metadata Plugin of the Oracle Enterprise Manager Base Platform that allows unauthenticated attackers with network access to exploit the system via HTTP. Successful exploitation necessitates human interaction from individuals other than the attacker. Although the vulnerability is localized to Oracle Enterprise Manager Base Platform, it could potentially affect additional products within the enterprise environment. Exploitation may lead to significant disruptions, including the possibility of full system takeover, with serious implications for confidentiality, integrity, and availability.
Affected Version(s)
Oracle Enterprise Manager Base Platform 13.5
Oracle Enterprise Manager Base Platform 24.1