CVE-2026-46858

Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise APM - Application Performance Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all APM - Application Performance Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of APM - Application Performance Management. CVSS 3.1 Base Score 9.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).

• CWE-284

• https://www.oracle.com/security-alerts/cspujun2026.htmlVendor Advisory

Published

Jun 17, 2026

Last Modified

Jun 18, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46852Vulnerability in the Oracle Enterprise Manager Base Platform…9.9
• CVE-2026-46853Vulnerability in the Oracle Enterprise Manager Base Platform…9.6
• CVE-2026-46854Vulnerability in the Oracle Enterprise Manager Base Platform…9.9
• CVE-2026-46855Vulnerability in the Oracle Enterprise Manager Base Platform…9.9
• CVE-2026-46856Vulnerability in the Oracle Enterprise Manager Base Platform…9.6
• CVE-2026-46857Vulnerability in the Oracle Enterprise Manager Base Platform…9.8
• CVE-2026-46859Vulnerability in the Oracle Agile PLM product of Oracle Supp…9.8
• CVE-2026-4686Incorrect boundary conditions in the Graphics: Canvas2D comp…7.5
• CVE-2026-46860Vulnerability in the MySQL Router product of Oracle MySQL (c…9.8
• CVE-2026-46861Vulnerability in the MySQL NDB Cluster product of Oracle MyS…9.6
• CVE-2026-46862Vulnerability in the MySQL Router product of Oracle MySQL (c…7.5
• CVE-2026-46863Vulnerability in the MySQL Server, MySQL Cluster product of …7.5