PT-2026-3726 · Oracle · Epm Agent+1

Patrick Murphy · Published 2026-01-20 · Updated 2026-01-21 · CVE-2026-21979

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Planning and Budgeting Cloud Service versions 25.04.07

Description A flaw exists within the Oracle Planning and Budgeting Cloud Service, specifically in the EPM Agent component. A highly privileged attacker with access to the system can compromise the service. Exploitation requires interaction from someone other than the attacker and could lead to unauthorized access to sensitive data or complete data access.

Recommendations Update the EPM Agent.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-00686

CVE-2026-21979

Affected Products

Epm Agent

Oracle Planning/Budgeting Cloud Service

References · 6

• https://bdu.fstec.ru/vul/2026-00686 · Security Note
• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21979 · Security Note
• https://twitter.com/VulmonFeeds/status/2013815793658531936 · Twitter Post
• https://twitter.com/CVEnew/status/2013740404668031470 · Twitter Post
• https://t.me/CVEtracker/42634 · Telegram Post