CVE-2026-46928

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Spares Management versions 12.2.3 through 12.2.15

Description An issue exists in the Internal Operations component of the Oracle Spares Management product. A low privileged attacker with network access via HTTPS can exploit this flaw to compromise the system, potentially resulting in a full takeover of Oracle Spares Management.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.