CVE-2026-46938

HighCVSS 7.2

Published: 17/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile — higher than 36% of all known CVEs

Summary

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning) allows a high privileged attacker with network access via HTTP to compromise Oracle Cost Management. The impact on confidentiality, integrity, and availability is significant.

Risk Assessment

An attacker can remotely take control of Oracle Cost Management, potentially leading to serious consequences for the organization, including data loss and operational disruptions.

Recommendation

It is recommended to update to the latest version of Oracle E-Business Suite to mitigate the risks associated with this vulnerability and implement appropriate security measures.

Original NVD description (English source)

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).