Base de CVEs

CVE-2026-46960 Alta · 7.2 CWE-284 17/06/2026

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite ...

Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Project Portfolio Analysis. Successful attacks of this vulnerability can result in takeover of Oracle Project Portfolio Analysis. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46957 Alta · 7.5 CWE-284 17/06/2026

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component:...

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupplier Portal. Successful attacks of this vulnerability can result in takeover of Oracle iSupplier Portal. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46956 Alta · 7.2 CWE-284 17/06/2026

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component:...

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Property Manager. Successful attacks of this vulnerability can result in takeover of Oracle Property Manager. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46950 Alta · 8.8 CWE-284 17/06/2026

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite ...

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Outbound Telephony. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46949 Crítica · 9.1 CWE-284 17/06/2026

Controle de acesso inadequado no Oracle Advanced Outbound Telephony (E-Business Suite)

Vulnerabilidade no produto Oracle Advanced Outbound Telephony do Oracle E-Business Suite (componente: Internal Operations). As versões suportadas afetadas são 12.2.3-12.2.15. Vulnerabilidade facilmente explorável permite a um atacante não autenticado com acesso à rede via HTTP comprometer o Oracle Advanced Outbound Telephony. Ataques bem-sucedidos desta vulnerabilidade podem resultar em criação, exclusão ou modificação não autorizada de dados críticos ou de todos os dados acessíveis do Oracle Advanced Outbound Telephony, bem como em acesso não autorizado a dados críticos ou acesso completo a todos os dados acessíveis do Oracle Advanced Outbound Telephony. Pontuação base CVSS 9.1 (impactos de confidencialidade e integridade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

CVE-2026-46947 Alta · 8.8 CWE-284 17/06/2026

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite ...

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony. Successful attacks of this vulnerability can result in takeover of Oracle Advanced Outbound Telephony. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46946 Crítica · 9.1 CWE-284 17/06/2026

Controle de acesso inadequado no Oracle iSupport (CVE-2026-46946)

Vulnerabilidade no produto Oracle iSupport do Oracle E-Business Suite (componente: Internal Operations). Versões suportadas afetadas são 12.2.3-12.2.15. Vulnerabilidade facilmente explorável permite que um atacante com privilégios altos e acesso à rede via HTTP comprometa o Oracle iSupport. Embora a vulnerabilidade esteja no Oracle iSupport, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos podem resultar na tomada de controle do Oracle iSupport. CVSS 3.1 Base Score 9.1 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46945 Crítica · 9.1 CWE-284 17/06/2026

Controle de acesso inadequado no Oracle iSupport (E-Business Suite)

Vulnerabilidade no produto Oracle iSupport do Oracle E-Business Suite (componente: Internal Operations). As versões suportadas afetadas são 12.2.3-12.2.15. Vulnerabilidade facilmente explorável que permite a um atacante com privilégios altos e acesso à rede via HTTP comprometer o Oracle iSupport. Embora a vulnerabilidade esteja no Oracle iSupport, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos podem resultar na tomada de controle do Oracle iSupport. CVSS 3.1 Base Score 9.1 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46944 Crítica · 9.1 CWE-284 17/06/2026

Oracle iSupport: controle de acesso inadequado (CVE-2026-46944)

Vulnerabilidade no Oracle iSupport do Oracle E-Business Suite (componente: Internal Operations). As versões suportadas afetadas são 12.2.3-12.2.15. Vulnerabilidade facilmente explorável permite a um atacante com altos privilégios e acesso à rede via HTTP comprometer o Oracle iSupport. Embora a vulnerabilidade esteja no Oracle iSupport, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos desta vulnerabilidade podem resultar na tomada de controle do Oracle iSupport. CVSS 3.1 Base Score 9.1 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46939 Alta · 8.1 CWE-284 17/06/2026

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component:...

Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suite (component: Supply to Order Workbench). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configure to Order. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Configure to Order accessible data as well as unauthorized access to critical data or complete access to all Oracle Configure to Order accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

CVE-2026-46938 Alta · 7.2 CWE-284 17/06/2026

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost...

Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46932 Alta · 7.1 CWE-284 17/06/2026

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite ...

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Asset Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Asset Management. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).

CVE-2026-46931 Alta · 8.8 CWE-284 17/06/2026

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite ...

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.6-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Asset Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46930 Crítica · 9.1 CWE-284 17/06/2026

Oracle In-Memory Cost Management for Discrete Industries - Controle de Acesso Inadequado (Oracle E-Business Suite)

Vulnerabilidade no produto Oracle In-Memory Cost Management for Discrete Industries do Oracle E-Business Suite (componente: Internal Operations). As versões suportadas que são afetadas são 12.2.12-12.2.15. Vulnerabilidade facilmente explorável permite que um atacante não autenticado com acesso à rede via HTTPS comprometa o Oracle In-Memory Cost Management for Discrete Industries. Ataques bem-sucedidos podem resultar em acesso não autorizado para criação, exclusão ou modificação de dados críticos ou de todos os dados acessíveis do Oracle In-Memory Cost Management for Discrete Industries, bem como acesso não autorizado a dados críticos ou acesso completo a todos os dados acessíveis do Oracle In-Memory Cost Management for Discrete Industries. CVSS 3.1 Base Score 9.1 (impactos de Confidencialidade e Integridade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

CVE-2026-46927 Alta · 8.1 CWE-284 17/06/2026

Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal...

Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Receivables. Successful attacks of this vulnerability can result in takeover of Oracle Receivables. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46926 Alta · 8.8 CWE-284 17/06/2026

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46925 Alta · 8.3 CWE-284 17/06/2026

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel CRM Cloud Applications executes to compromise Siebel CRM Cloud Applications. While the vulnerability is in Siebel CRM Cloud Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46920 Alta · 8.1 CWE-284 17/06/2026

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...

Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Cloud Applications. Successful attacks of this vulnerability can result in takeover of Siebel CRM Cloud Applications. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46919 Crítica · 9.8 CWE-284 17/06/2026

Oracle Siebel CRM Cloud Applications - Controle de Acesso Inadequado (CVE-2026-46919)

Vulnerabilidade no produto Siebel CRM Cloud Applications da Oracle Siebel CRM (componente: Siebel Cloud Manager). As versões suportadas que são afetadas são 17.0-26.5. Vulnerabilidade facilmente explorável por atacante não autenticado com acesso de rede via HTTP permite comprometer o Siebel CRM Cloud Applications. Ataques bem-sucedidos desta vulnerabilidade podem resultar na tomada do Siebel CRM Cloud Applications. CVSS 3.1 Base Score 9.8 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46918 Crítica · 9.9 CWE-284 17/06/2026

Oracle E-Business Suite Process Manufacturing Product Development: controle de acesso inadequado crítico (CVE-2026-46918)

Vulnerabilidade no produto Oracle Process Manufacturing Product Development do Oracle E-Business Suite (componente: Internal Operations). As versões suportadas afetadas são 12.2.3-12.2.15. Vulnerabilidade facilmente explorável permite a um atacante com baixo privilégio e acesso à rede via HTTP comprometer o Oracle Process Manufacturing Product Development. Embora a vulnerabilidade esteja no Oracle Process Manufacturing Product Development, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos podem resultar na tomada de controle do Oracle Process Manufacturing Product Development. Pontuação Base CVSS 3.1: 9.9 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46915 Alta · 8.5 CWE-284 17/06/2026

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business...

Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: Production). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair and Overhaul. While the vulnerability is in Oracle Complex Maintenance, Repair and Overhaul, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Complex Maintenance, Repair and Overhaul. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46913 Crítica · 9.3 CWE-284 17/06/2026

Oracle JD Edwards EnterpriseOne Tools - Controle de acesso inadequado no componente Installation Security

Vulnerabilidade no produto JD Edwards EnterpriseOne Tools da Oracle JD Edwards (componente: Installation Security). As versões suportadas afetadas são 9.2.0.0-9.2.26.2. Vulnerabilidade facilmente explorável permite que um atacante não autenticado com logon na infraestrutura onde o JD Edwards EnterpriseOne Tools é executado comprometa o JD Edwards EnterpriseOne Tools. Embora a vulnerabilidade esteja no JD Edwards EnterpriseOne Tools, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos podem resultar na tomada de controle do JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.3 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVE-2026-46911 Crítica · 9.6 CWE-284 17/06/2026

Controle de Acesso Inadequado no Oracle JD Edwards EnterpriseOne Project Costing

Vulnerabilidade no produto JD Edwards EnterpriseOne Project Costing da Oracle JD Edwards (componente: Job Costing). A versão suportada afetada é a 9.2. Vulnerabilidade facilmente explorável permite que um atacante com baixo privilégio e acesso à rede via JDENET comprometa o JD Edwards EnterpriseOne Project Costing. Embora a vulnerabilidade esteja no JD Edwards EnterpriseOne Project Costing, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos podem resultar em acesso não autorizado para criação, exclusão ou modificação de dados críticos ou de todos os dados acessíveis do JD Edwards EnterpriseOne Project Costing, bem como em acesso não autorizado a dados críticos ou acesso completo a todos os dados acessíveis do JD Edwards EnterpriseOne Project Costing. CVSS 3.1 Base Score 9.6 (impactos de Confidencialidade e Integridade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N).

CVE-2026-46909 Crítica · 9.8 CWE-284 17/06/2026

Oracle JD Edwards EnterpriseOne Tools - controle de acesso inadequado

Vulnerabilidade no produto JD Edwards EnterpriseOne Tools da Oracle JD Edwards (componente: Enterprise Infrastructure Security). As versões suportadas afetadas são 9.2.0.0-9.2.26.2. Vulnerabilidade facilmente explorável permite que um atacante não autenticado com acesso à rede via HTTP comprometa o JD Edwards EnterpriseOne Tools. Ataques bem-sucedidos contra esta vulnerabilidade podem resultar em assunção de controle do JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-46908 Crítica · 9.9 CWE-284 17/06/2026

Oracle JD Edwards EnterpriseOne Accounts Payable - Controle de Acesso Inadequado

Vulnerabilidade no produto JD Edwards EnterpriseOne Accounts Payable da Oracle JD Edwards (componente: Accounts Payable). A versão suportada afetada é a 9.2. Vulnerabilidade de fácil exploração que permite a um atacante com baixo privilégio e acesso à rede via HTTP comprometer o JD Edwards EnterpriseOne Accounts Payable. Embora a vulnerabilidade esteja no JD Edwards EnterpriseOne Accounts Payable, ataques podem impactar significativamente produtos adicionais (mudança de escopo). Ataques bem-sucedidos explorando esta vulnerabilidade podem resultar na tomada de controle do JD Edwards EnterpriseOne Accounts Payable. CVSS 3.1 Base Score 9.9 (impactos de Confidencialidade, Integridade e Disponibilidade). Vetor CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).