CVE-2026-46948

Name of the Vulnerable Software and Affected Versions Oracle Utilities Network Management System versions 2.4.0.1.0 through 2.4.0.1.32 Oracle Utilities Network Management System versions 2.5.0.1.0 through 2.5.0.1.17 Oracle Utilities Network Management System versions 2.5.0.2.0 through 2.5.0.2.11 Oracle Utilities Network Management System versions 2.6.0.2.0 through 2.6.0.2.7 Oracle Utilities Network Management System version 25.12.0.0.0

Description A security issue in the Security component allows a low privileged attacker with network access via HTTP to compromise the system. The exploitation requires human interaction from a user other than the attacker. A successful attack can lead to unauthorized read access to a subset of data, as well as unauthorized update, insert, or delete access to certain accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.