Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-46857

Опубликовано: 17 июн. 2026
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_base_platform:24.1.0.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 41%
0.00508
Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-284

Связанные уязвимости

CVSS3: 9.8
github
около 2 месяцев назад

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS3: 9.8
fstec
около 2 месяцев назад

Уязвимость компонента Management Service программной платформы Oracle Enterprise Manager Base Platform, позволяющая нарушителю получить полный контроль над приложением

EPSS

Процентиль: 41%
0.00508
Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-284