216.73.217.86

CVE-2026-46837

· Published 28/05/2026 21:16 · Modified 29/05/2026 16:16

Labels: CVE-2026-46837 2026-05-28CVE-2026-46837CWE-269[email protected]

Essential information

Published
28/05/2026 21:16
Modified
29/05/2026 16:16
Author
Creator
CVSS
8.8 HIGH (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS metrics

Description

Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Flow Manufacturing. Successful attacks of this vulnerability can result in takeover of Oracle Flow Manufacturing. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

NVD status

Status
Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
oracle / flow manufacturing cpe:2.3:a:oracle:flow_manufacturing:12.2.9-12.2.15:*:*:*:*:*:*:*
oracle / oracle e-business suite cpe:2.3:a:oracle:oracle_e-business_suite:12.2.9-12.2.15:*:*:*:*:*:*:*

References