CVE-2026-46987

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1

Description A flaw in the Application Service Level Mgmt component allows a low privileged attacker with network access via HTTPS to compromise the platform. This issue can lead to unauthorized access to critical data or complete access to all accessible data within the Oracle Enterprise Manager Base Platform. Furthermore, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.