Oracle E-Business Suite HR Intelligence Compromised by Local Attacker
CVE-2026-46971

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hr Intelligence
Vendor
CVE Published:
16 June 2026

What is CVE-2026-46971?

A vulnerability exists in the Oracle HR Intelligence component of the Oracle E-Business Suite. This issue affects supported versions from 12.2.3 to 12.2.15, allowing a low privileged attacker with network access to potentially compromise the HR Intelligence system. Successful exploitation can result in an unauthorized takeover, leading to significant impacts on confidentiality, integrity, and availability of sensitive HR data. Organizations using these versions are advised to apply the relevant patches to mitigate this risk. For further details, refer to the Oracle advisory.

Affected Version(s)

Oracle HR Intelligence 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cspujun2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.