PT-2026-3726

CVE-2026-21979

Published

2026-01-20

Updated

2026-01-21

Description by

CVSS 2.0

4.6

Medium

MetricsAV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Planning and Budgeting Cloud Service versions 25.04.07

Description A flaw exists within the Oracle Planning and Budgeting Cloud Service, specifically in the EPM Agent component. A highly privileged attacker with access to the system can compromise the service. Exploitation requires interaction from someone other than the attacker and could lead to unauthorized access to sensitive data or complete data access.

Recommendations Update the EPM Agent.

Exploitability

Fix

Impacts

Researchers

Patrick Murphy

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers

CVE-2026-21979