CVE-2026-46990

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1

Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. An unauthenticated attacker with network access via HTTP can compromise the platform. Successful exploitation may lead to unauthorized read, update, insert, or delete access to specific data, as well as a partial denial of service (partial DOS), which is a condition where some services of the system become unavailable while others remain functional.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.