Vulnerability in Oracle E-Business Suite's Advanced Outbound Telephony
CVE-2026-46947

8.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Advanced Outbound Telephony
Vendor
CVE Published:
16 June 2026

What is CVE-2026-46947?

A vulnerability in Oracle E-Business Suite's Advanced Outbound Telephony allows an attacker with low privileges and network access via HTTP to exploit the system. This exploitation could lead to the unauthorized takeover of Oracle Advanced Outbound Telephony, impacting the integrity, confidentiality, and availability of the operations. Supported versions ranging from 12.2.3 to 12.2.15 are at risk, necessitating prompt attention to ensure system security.

Affected Version(s)

Oracle Advanced Outbound Telephony 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.