CVE-2026-46858: Undefined Security Weakness

Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager component: JADM, JVM Diagnostics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

New Relic: Stored XSS firing if the error occurs when trying to delete the APM app

Hey team, I have discovered that when the user tries to delete the APM app and some error occurs, the error message contains the app's name, which is not sanitized properly. So the XSS is possible there under certain circumstances. The XSS payload is absolutely simple here, it can be like e.g...