What is the CVSS score of CVE-2026-47000?

CVE-2026-47000 has a CVSS 3.1 base score of 3.5 (Low). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.2%.

Oracle Enterprise Manager CVE-2026-47000

EUVD-2026-46489 LOW

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-07-21 oracle

GHSA-qfxf-r6xq-gxwx

CSRF Oracle Oracle Enterprise Manager Base Platform Oracle Corporation

3.5

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

3.5 LOW

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

vuln.today AI

3.5 LOW

Network HTTPS vector with low-privileged account required and mandatory victim interaction; scope unchanged with limited integrity-only impact, no confidentiality or availability effect.

3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 02:35 vuln.today

DescriptionCVE.org

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 3.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N).

AnalysisAI

Integrity compromise in Oracle Enterprise Manager Base Platform 24.1 Security Framework allows a low-privileged, network-authenticated attacker to perform unauthorized insert, update, or delete operations on accessible platform data via HTTPS, contingent on victim interaction. No public exploit code or CISA KEV listing exists at time of analysis. Despite the 'Authentication Bypass' tag in source intelligence, the CVSS vector (PR:L, UI:R) indicates partial privilege circumvention rather than full authentication elimination, and the overall CVSS 3.5 Low score reflects constrained, integrity-only impact.

Technical ContextAI

The affected component is the Security Framework within Oracle Enterprise Manager Base Platform version 24.1, confirmed by CPE cpe:2.3:a:oracle_corporation:oracle_enterprise_manager_base_platform and the EUVD entry EUVD-2026-46489. Oracle Enterprise Manager is a centralized management console for Oracle technology stacks, commonly deployed in large enterprise Oracle environments. The CWE is listed as N/A by the reporter, limiting root-cause classification to available signals. The 'Authentication Bypass' tag from source intelligence suggests the flaw may allow a low-privileged session to circumvent security framework controls - potentially bypassing authorization checks within the Security Framework component rather than eliminating the authentication requirement entirely. The attack vector is HTTPS, meaning exploitation targets the web-accessible management console. Scope is unchanged (S:U), indicating the impact is contained within the Enterprise Manager application boundary.

RemediationAI

Apply Oracle's July 2026 Critical Patch Update, which addresses this vulnerability in Oracle Enterprise Manager Base Platform 24.1; the advisory is available at https://www.oracle.com/security-alerts/cpujul2026.html. An exact patched version number is not independently confirmed from the available input data beyond the CPU reference - consult the advisory directly for the precise patch target version. As compensating controls prior to patching, restrict HTTPS access to the Oracle Enterprise Manager console to trusted internal network segments using firewall or network ACLs, reducing the pool of low-privileged accounts that could initiate exploitation; note this does not eliminate risk for insider-threat scenarios. Additionally, enforce strict least-privilege access controls on Enterprise Manager user accounts, limiting the number of low-privileged accounts active in the environment. Educating users about unsolicited links or embedded content in the management interface can reduce the user-interaction prerequisite (UI:R) that this exploit depends upon.