CVE-2026-46970
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Supported versions affected are 12.2.3-12.2.15.
Risk Assessment
An attacker could gain full control over Oracle HR Intelligence, potentially leading to serious breaches of confidentiality, integrity, and availability of data within the organization.
Recommendation
It is recommended to update to the latest version of Oracle E-Business Suite to mitigate this vulnerability and to monitor system access for potential attack attempts.
Other vulnerabilities in Oracle HR Intelligence
See all- CVE-2026-83076Medium
Vulnerability in Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise Oracle HR Intelligence (though difficult to exploit), leading to unauthorized creation, deletion, or modification of critical data and complete denial of service.
- CVE-2026-46922High
A vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite allows a high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Supported versions affected are 12.2.3-12.2.15.
Original NVD description (English source)
Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HR Intelligence. Successful attacks of this vulnerability can result in takeover of Oracle HR Intelligence. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS