CVE-2026-46858

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager APM - Application Performance Management version 13.5 Oracle Enterprise Manager APM - Application Performance Management version 24.1

Description An issue exists in the JADM and JVM Diagnostics components of the APM - Application Performance Management product. An unauthenticated attacker with network access via HTTP can compromise the system. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data or all accessible data within the product. Additionally, it can result in a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.