CVE-2026-46901

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Command Center Framework versions V15 Oracle Enterprise Command Center Framework versions V16

Description An issue in the Core component of the Oracle Enterprise Command Center Framework allows a low privileged attacker with network access via HTTP to compromise the system. This flaw can lead to unauthorized access, creation, deletion, or modification of critical data and all accessible data within the framework. Additionally, it may result in a partial denial of service (DOS), which is a condition where a system becomes partially unavailable to its intended users. While the flaw resides in the Oracle Enterprise Command Center Framework, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.