CVE-2026-46856

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1

Description An issue exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform. An unauthenticated attacker with network access via HTTP can compromise the platform, potentially leading to a full takeover. The exploitation requires human interaction from a person other than the attacker. Although the flaw resides in the Base Platform, successful attacks may result in a scope change, significantly impacting additional products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.