Exploit in Oracle Enterprise Manager Base Platform Metadata Plugin
CVE-2026-46853

9.6CRITICAL

Key Information:

Vendor

Oracle

Vendor
CVE Published:
16 June 2026

What is CVE-2026-46853?

A vulnerability exists in the Metadata Plugin of the Oracle Enterprise Manager Base Platform that allows unauthenticated attackers with network access to exploit the system via HTTP. Successful exploitation necessitates human interaction from individuals other than the attacker. Although the vulnerability is localized to Oracle Enterprise Manager Base Platform, it could potentially affect additional products within the enterprise environment. Exploitation may lead to significant disruptions, including the possibility of full system takeover, with serious implications for confidentiality, integrity, and availability.

Affected Version(s)

Oracle Enterprise Manager Base Platform 13.5

Oracle Enterprise Manager Base Platform 24.1

References

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.