CVE-2026-46969
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk36th percentile — higher than 36% of all known CVEs
Summary
Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite, affecting the Internal Operations component. Versions 12.2.3-12.2.15 are susceptible to easily exploitable attacks that can lead to takeover of Oracle Financials for EMEA.
Risk Assessment
A high privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to serious breaches of confidentiality, integrity, and availability of data.
Recommendation
It is recommended to update to the latest version of Oracle Financials to minimize the risk associated with this vulnerability and to implement additional security measures to protect the system.
Original NVD description (English source)
Vulnerability in the Oracle Financials for EMEA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Financials for EMEA. Successful attacks of this vulnerability can result in takeover of Oracle Financials for EMEA. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).