CVE-2026-46995 in Enterprise Manager Base Platform
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within the Oracle Enterprise Manager Base Platform's Metadata Plugin component, representing a critical security flaw that affects versions 13.5 and 24.1 of the platform. The vulnerability operates under the Common Weakness Enumeration classification as CWE-20, specifically addressing improper input validation or injection flaws that can lead to unauthorized access and system compromise. The attack vector requires network access via HTTPS and targets low privileged attackers who can exploit this weakness without requiring elevated privileges initially.
The technical implementation of this vulnerability stems from insufficient validation mechanisms within the Metadata Plugin's processing of user-supplied data, allowing attackers to manipulate metadata structures through crafted inputs. This flaw enables what security researchers classify as a privilege escalation scenario where network-based attacks can progress beyond initial access boundaries. The CVSS 3.1 scoring system places this vulnerability at an 8.8 severity level, indicating high impact across confidentiality, integrity, and availability domains. The attack complexity is rated as low, meaning minimal technical expertise is required to exploit the weakness effectively.
The operational impact of successful exploitation encompasses complete system compromise where attackers can gain full control over the Oracle Enterprise Manager Base Platform operations. This represents a significant threat to enterprise monitoring infrastructure since the platform typically serves as a centralized management interface for critical enterprise systems. Organizations relying on this platform face potential data exfiltration, unauthorized modification of monitoring configurations, and complete service disruption that could affect business continuity. The vulnerability's widespread impact across supported versions means organizations must urgently assess their deployment landscape and implement protective measures.
Security mitigation strategies should focus on immediate patch application as provided by Oracle for the affected versions, while implementing network segmentation to limit access to the platform. Organizations should also consider monitoring for anomalous metadata plugin activities and establishing robust access controls around the platform. The vulnerability aligns with ATT&CK technique T1078 which covers valid accounts usage, as attackers may leverage compromised credentials to manipulate platform metadata. Additional protective measures include implementing network-based intrusion detection systems that can identify malicious traffic patterns targeting the specific Metadata Plugin endpoints and establishing comprehensive audit logging for all administrative activities within the platform's metadata processing components.