CVE-2026-46981

{"id": "CVE-2026-46981", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46981", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-22T19:26:07.217977Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert_us@oracle.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 3.9}]}, "affected": [{"source": "secalert_us@oracle.com", "affectedData": [{"vendor": "Oracle Corporation", "product": "Oracle Utilities Network Management System", "versions": [{"status": "affected", "version": "2.5.0.1.0", "versionType": "custom", "lessThanOrEqual": "2.5.0.1.17"}, {"status": "affected", "version": "2.5.0.2.0", "versionType": "custom", "lessThanOrEqual": "2.5.0.2.11"}, {"status": "affected", "version": "2.6.0.1.0", "versionType": "custom", "lessThanOrEqual": "2.6.0.1.12"}, {"status": "affected", "version": "2.6.0.2.0", "versionType": "custom", "lessThanOrEqual": "2.6.0.2.8"}, {"status": "affected", "version": "25.12.0.0.0", "versionType": "custom", "lessThanOrEqual": "25.12.0.0.2"}]}]}], "published": "2026-07-21T22:17:03.123", "references": [{"url": "https://www.oracle.com/security-alerts/cpujul2026.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.8 and 25.12.0.0.0-25.12.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Utilities Network Management System. While the vulnerability is in Oracle Utilities Network Management System, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Utilities Network Management System accessible data as well as unauthorized read access to a subset of Oracle Utilities Network Management System accessible data. CVSS 3.1 Base Score 7.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)."}, {"lang": "es", "value": "Vulnerabilidad en el producto Oracle Utilities Network Management System de Oracle Utilities Applications (componente: Mobile). Las versiones compatibles afectadas son 2.5.0.1.0-2.5.0.1.17, 2.5.0.2.0-2.5.0.2.11, 2.6.0.1.0-2.6.0.1.12, 2.6.0.2.0-2.6.0.2.8 y 25.12.0.0.0-25.12.0.0.2. La vulnerabilidad f\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red v\u00eda HTTP comprometer Oracle Utilities Network Management System. Aunque la vulnerabilidad est\u00e1 en Oracle Utilities Network Management System, los ataques pueden tener un impacto significativo en productos adicionales (cambio de alcance). Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado de actualizaci\u00f3n, inserci\u00f3n o eliminaci\u00f3n a algunos de los datos accesibles de Oracle Utilities Network Management System, as\u00ed como acceso de lectura no autorizado a un subconjunto de los datos accesibles de Oracle Utilities Network Management System. Puntuaci\u00f3n Base CVSS 3.1 de 7.2 (impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)."}], "lastModified": "2026-10-24T19:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:utilities_network_management_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47DCAB30-358E-4DB7-8F7D-FB19D6C8FBA9", "versionEndIncluding": "2.5.0.1.17", "versionStartIncluding": "2.5.0.1.0"}, {"criteria": "cpe:2.3:a:oracle:utilities_network_management_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1609300-ED11-4A07-9D36-C2BDB538759C", "versionEndIncluding": "2.5.0.2.11", "versionStartIncluding": "2.5.0.2.0"}, {"criteria": "cpe:2.3:a:oracle:utilities_network_management_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46324CF0-069F-4FFD-89D0-4D01E77F3866", "versionEndIncluding": "2.6.0.1.12", "versionStartIncluding": "2.6.0.1.0"}, {"criteria": "cpe:2.3:a:oracle:utilities_network_management_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9CE392B-E95A-4443-ADC0-EE19710D8554", "versionEndIncluding": "2.6.0.2.8", "versionStartIncluding": "2.6.0.2.0"}, {"criteria": "cpe:2.3:a:oracle:utilities_network_management_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57E3EAD4-00B2-4E1B-BA00-D50EF25CAB73", "versionEndIncluding": "25.12.0.0.2", "versionStartIncluding": "25.12.0.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}