Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iAssets. While the vulnerability is in Oracle iAssets, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle iAssets. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-29 | 2 | Patch2 |
| 2026-06-13 | 1 | General1 |
| 2026-06-17 | 1 | Disclouser1 |
🚨 CVE-2026-46822 — CVSS 9.9/10 ██████████ Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations). Supported... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/iNPtJGW0WI
Post summary
The post announces a critical vulnerability in Oracle iAssets and emphasizes that a patch is now available, providing CVSS and severity details but no exploit or PoC evidence.
【緊急】CVE-2026-46822 OracleのOracle E-Business Suiteに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/06/12/cve-2026-46822-oracle-e-business-suite/ #IT #Security #cybersecurity
Post summary
The post announces a serious Oracle E‑Business Suite vulnerability (CVE‑2026‑46822) and urges immediate action, but provides no further technical details, PoC, or patch information.
CVE-2026-46822: Oracle iAssets Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04lkbb10
Post summary
Only the CVE number and a generic title are provided; no specific exploit, mitigation, or technical details are included.
🚨 Critical - Oracle May 2026 Security Patch Update Oracle released patches for multiple critical vulnerabilities affecting Oracle Database Server, REST Data Services (ORDS), E-Business Suite, and Hospitality products. Included critical CVEs: • CVE-2026-34311 • CVE-2026-46775 • CVE-2026-46817 • CVE-2026-46819 • CVE-2026-46822 • CVE-2026-46824 • CVE-2026-46833 • CVE-2026-46839 • CVE-2026-46840 Several issues are remotely exploitable and may allow unauthenticated attackers to achieve code execution, compromise vulnerable services, or cause denial of service. 👉 Affected: Multiple Oracle enterprise products including ORDS, Oracle Database, E-Business Suite, and Hospitality OPERA 👉 Action: Apply Oracle’s May 2026 Critical Patch Update immediately
Post summary
Oracle announced the release of critical patches for multiple CVEs affecting several enterprise products, emphasizing remote code execution and denial-of-service risks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | iassets | - | - | - |