Oracle Enterprise Manager Base Platform Privilege Escalation

Publication date: 2026-06-17

Last updated on: 2026-06-18

Assigner: Oracle

Description

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-18

Generated

2026-07-08

AI Q&A

2026-06-17

EPSS Evaluated

2026-07-06

NVD

CVE-2026-46868

EUVD

EUVD-2026-37361

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	enterprise_manager_base_platform	From 13.5 (inc)
oracle	enterprise_manager_base_platform	From 24.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Oracle Enterprise Manager Base Platform, specifically in the Extensibility Framework component. It affects supported versions 13.5 and 24.1. The flaw is easily exploitable by a highly privileged attacker who has network access via HTTPS. Exploiting this vulnerability can allow the attacker to compromise and take over the Oracle Enterprise Manager Base Platform.

Impact Analysis

The impact of this vulnerability is significant as it can lead to a complete takeover of the Oracle Enterprise Manager Base Platform by an attacker. This means the attacker can gain unauthorized access and control, potentially compromising confidentiality, integrity, and availability of the system.

Hi! I’m here to help you understand CVE-2026-46868. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70