PT-2026-3726 · Oracle · Epm Agent+1

Patrick Murphy · Publicado 2026-01-20 · Atualizado 2026-01-21 · CVE-2026-21979

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Planning and Budgeting Cloud Service versions 25.04.07

Description A flaw exists within the Oracle Planning and Budgeting Cloud Service, specifically in the EPM Agent component. A highly privileged attacker with access to the system can compromise the service. Exploitation requires interaction from someone other than the attacker and could lead to unauthorized access to sensitive data or complete data access.

Recommendations Update the EPM Agent.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2026-00686

CVE-2026-21979

Produtos afetados

Epm Agent

Oracle Planning/Budgeting Cloud Service

Referências · 6

• https://bdu.fstec.ru/vul/2026-00686 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2013815793658531936 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2013740404668031470 · Publicação no Twitter
• https://oracle.com/security-alerts/cpujan2026.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21979 · Nota de Segurança
• https://t.me/CVEtracker/42634 · Publicação no Telegram