CVE-2026-46932
Undergoing Analysis Undergoing Analysis - In Progress

Oracle Enterprise Asset Management Partial Denial of Service

Publication date: 2026-06-17

Last updated on: 2026-06-17

Assigner: Oracle

Description
Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Asset Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Asset Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-17
Last Modified
2026-06-17
Generated
2026-07-08
AI Q&A
2026-06-17
EPSS Evaluated
2026-07-06
NVD
CVE-2026-46932
EUVD
EUVD-2026-37248

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle enterprise_asset_management From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Oracle Enterprise Asset Management product of the Oracle E-Business Suite, specifically affecting versions 12.2.3 through 12.2.15. It is an easily exploitable flaw that allows a low privileged attacker with network access via HTTP to compromise the system.

Successful exploitation can lead to unauthorized access to critical data or even complete access to all data accessible through Oracle Enterprise Asset Management. Additionally, the attacker can cause a partial denial of service (partial DOS) affecting the availability of the system.

Impact Analysis

The impact of this vulnerability includes unauthorized access to sensitive and critical data within Oracle Enterprise Asset Management. This can compromise confidentiality significantly.

Moreover, it can lead to a partial denial of service, which affects the availability of the system, potentially disrupting business operations that rely on Oracle Enterprise Asset Management.

Compliance Impact

This vulnerability allows unauthorized access to critical data within Oracle Enterprise Asset Management, which could lead to exposure of sensitive information.

Such unauthorized access and potential data compromise may impact compliance with data protection regulations like GDPR and HIPAA, which require safeguarding of sensitive and personal data.

Additionally, the partial denial of service caused by this vulnerability could affect availability requirements mandated by these standards.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46932. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart