Network Vulnerability in Oracle Enterprise Manager Agents
CVE-2026-46993

8.2HIGH

Key Information:

Vendor

Oracle
Status
Oracle Enterprise Manager Base Platform
Vendor
CVE Published:
21 July 2026

What is CVE-2026-46993?

A vulnerability exists within the Oracle Enterprise Manager Base Platform, specifically in the Agent Next Gen component. This flaw potentially allows a low-privilege attacker with network access via HTTPS to compromise the system. Although primarily affecting the Oracle Enterprise Manager Base Platform, the repercussions of successful attacks may extend to other products. These attacks can lead to unauthorized creation, deletion, or modification of critical data, posing significant risks to confidentiality and integrity.

Affected Version(s)

Oracle Enterprise Manager Base Platform 13.5

Oracle Enterprise Manager Base Platform 24.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.