CVE-2026-46930

Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.12-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle In-Memory Cost Management for Discrete Industries. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle In-Memory Cost Management for Discrete Industries accessible data as well as unauthorized access to critical data or complete access to all Oracle In-Memory Cost Management for Discrete Industries accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

• CWE-284

• https://www.oracle.com/security-alerts/cspujun2026.htmlVendor Advisory

Published

Jun 17, 2026

Last Modified

Jun 18, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46925Vulnerability in the Siebel CRM Cloud Applications product o…8.3
• CVE-2026-46926Vulnerability in the Siebel CRM Cloud Applications product o…8.8
• CVE-2026-46927Vulnerability in the Oracle Receivables product of Oracle E-…8.1
• CVE-2026-46928Vulnerability in the Oracle Spares Management product of Ora…8.8
• CVE-2026-46929Vulnerability in the Oracle Cost Management product of Oracl…8.8
• CVE-2026-4693Incorrect boundary conditions in the Audio/Video: Playback c…7.5
• CVE-2026-46931Vulnerability in the Oracle Enterprise Asset Management prod…8.8
• CVE-2026-46932Vulnerability in the Oracle Enterprise Asset Management prod…7.1
• CVE-2026-46933Vulnerability in the Oracle Applications Manager product of …9.9
• CVE-2026-46934Vulnerability in the Oracle Complex Maintenance, Repair and …7.5
• CVE-2026-46935Vulnerability in the Oracle Complex Maintenance, Repair and …7.5
• CVE-2026-46936Vulnerability in the MySQL Server, MySQL Cluster product of …4.4