Security Weakness in Oracle Enterprise Manager Base Platform by Oracle
CVE-2026-46991

4.4MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Enterprise Manager Base Platform
Vendor
CVE Published:
21 July 2026

What is CVE-2026-46991?

A vulnerability exists in the Oracle Enterprise Manager Base Platform affecting versions 13.5 and 24.1. This weakness allows low-privileged attackers who have logged into the infrastructure hosting the platform to exploit the system. Successful exploitation can lead to unauthorized modifications, such as updates, insertions, or deletions of data, as well as unauthorized read access to certain accessible data. This situation poses a significant risk to the confidentiality and integrity of the information managed by the platform.

Affected Version(s)

Oracle Enterprise Manager Base Platform 13.5

Oracle Enterprise Manager Base Platform 24.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.