Unauthenticated Access in Oracle Enterprise Manager Base Platform by Oracle
CVE-2026-46998

8.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Enterprise Manager Base Platform
Vendor
CVE Published:
21 July 2026

What is CVE-2026-46998?

A vulnerability identified in the Oracle Enterprise Manager Base Platform exposes the system to unauthorized access. This flaw resides within the Metadata Plugin and affects versions 13.5 and 24.1. Attackers can exploit this vulnerability by gaining network access through HTTPS, requiring human interaction from another individual for successful exploitation. This can lead to a serious compromise, allowing unauthorized users to take control of the Oracle Enterprise Manager Base Platform.

Affected Version(s)

Oracle Enterprise Manager Base Platform 13.5

Oracle Enterprise Manager Base Platform 24.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.