CVE-2026-46955

HighCVSS 7.5

Published: 17/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile — higher than 5% of all known CVEs

Summary

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions affected are 12.2.3-12.2.15, and the vulnerability is difficult to exploit, requiring human interaction.

Risk Assessment

An unauthenticated attacker with network access via HTTP can compromise Oracle Human Resources, potentially leading to serious breaches of confidentiality, integrity, and availability.

Recommendation

It is recommended to update to the latest version of Oracle E-Business Suite and implement additional security measures to minimize the risk of exploitation of this vulnerability.

Original NVD description (English source)

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Human Resources. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).