CVE-2026-46872

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1

Description An issue exists in the Install component of the Oracle Enterprise Manager Base Platform. A high-privileged attacker with network access via HTTPS can compromise the platform. This may lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to a subset of accessible data. Additionally, the flaw allows an attacker to cause a hang or a frequently repeatable crash, resulting in a complete Denial of Service (DOS), which is a condition where the system becomes unavailable to its intended users. While the issue is located within the Base Platform, successful exploitation may significantly impact additional products.