Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cspumay2026.html |
|
Fri, 29 May 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 28 May 2026 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthenticated HTTPS Requests Causing Partial Denial of Service in Oracle REST Data Services | |
| Weaknesses | CWE-400 |
Thu, 28 May 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle REST Data Services. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). | |
| First Time appeared |
Oracle
Oracle rest Data Services |
|
| CPEs | cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle rest Data Services |
|
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2026-05-29T15:15:45.892Z
Reserved: 2026-05-18T15:55:10.305Z
Link: CVE-2026-46843
Updated: 2026-05-29T15:15:39.908Z
Status : Analyzed
Published: 2026-05-28T21:16:34.223
Modified: 2026-06-03T16:52:39.497
Link: CVE-2026-46843
No data.
OpenCVE Enrichment
Updated: 2026-05-28T22:15:06Z