CVE-2026-46989

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 13.5 and 24.1

Description A flaw in the UI Framework component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue can lead to unauthorized access to critical data, complete access to all accessible data, and unauthorized ability to update, insert, or delete data. Additionally, it may result in a partial denial of service (partial DOS), which is a condition where some services of the system become unavailable. While the issue resides in the Base Platform, attacks may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.