Remote Code Execution Flaw in Oracle E-Business Suite Quality Component
CVE-2026-46952

8.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Quality
Vendor
CVE Published:
16 June 2026

What is CVE-2026-46952?

A vulnerability exists in the Oracle Quality component of the Oracle E-Business Suite, affecting versions ranging from 12.2.3 to 12.2.15. This vulnerability grants low privileged attackers network access via HTTP, enabling them to compromise the Oracle Quality system. Successful exploitation could allow these attackers to take control of the entire Oracle Quality component, posing significant risks to confidentiality, integrity, and availability of data. Organizations using the affected versions are advised to apply security patches and mitigations as outlined in the Oracle security advisory.

Affected Version(s)

Oracle Quality 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.