CVE-2026-46994 in Enterprise Manager Base Platform
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle Enterprise Manager Base Platform's Agent Next Gen component, representing a critical security flaw that affects versions 13.5 and 24.1 of the platform. The vulnerability operates at the network level with minimal attack complexity requirements, as it requires only unauthenticated access via HTTPS protocol to exploit successfully. The CVSS 3.1 scoring system assigns this vulnerability a base score of 9.8, indicating a severe threat level that encompasses high impacts across confidentiality, integrity, and availability domains. This classification places the vulnerability in the highest severity tier, reflecting its potential for causing extensive damage to organizational security infrastructure.
The technical exploitation mechanism leverages the HTTPS communication channel to gain unauthorized access to the Oracle Enterprise Manager Base Platform, bypassing traditional authentication requirements. Attackers can compromise the entire platform without requiring legitimate credentials or prior access permissions, making this vulnerability particularly dangerous in environments where network exposure is inevitable. The vulnerability's ease of exploitation means that threat actors with basic networking capabilities can potentially achieve complete system compromise, undermining the fundamental security assumptions of the enterprise management platform.
From an operational standpoint, successful exploitation of this vulnerability results in full takeover of the Oracle Enterprise Manager Base Platform, providing attackers with complete control over the affected system. This level of compromise enables adversaries to manipulate monitoring data, alter configuration settings, and potentially use the compromised platform as a launch point for further attacks within the enterprise network. The impact extends beyond immediate system compromise to include potential data exfiltration, service disruption, and unauthorized modification of critical enterprise management functions that rely on this platform for operational oversight.
Organizations affected by this vulnerability should implement immediate mitigation strategies including network segmentation to limit access to the Oracle Enterprise Manager Base Platform, deployment of web application firewalls to monitor and filter HTTPS traffic, and implementation of network access controls to restrict exposure. The vulnerability aligns with CWE-287 (Improper Authentication) and potentially CWE-310 (Cryptographic Issues) categories within the Common Weakness Enumeration framework, highlighting authentication flaws that enable unauthorized system access. Additionally, this vulnerability maps to ATT&CK technique T1078 (Valid Accounts) and T1566 (Phishing) within the MITRE ATT&CK framework, as it represents a path for adversaries to establish persistent access through compromised platform credentials or network-level exploitation.
Security teams should prioritize patch management initiatives to address this vulnerability immediately, while also implementing comprehensive monitoring of HTTPS traffic patterns to detect potential exploitation attempts. The compromised platform could serve as a staging area for more sophisticated attacks targeting other enterprise systems, making prompt remediation essential for maintaining overall network security posture and protecting against cascading security incidents that may arise from the initial compromise.