Oracle Enterprise Manager Base Platform vulnerabilities

35 known vulnerabilities in Oracle Enterprise Manager Base Platform from Oracle. 35 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

35vulnerabilities

12critical

23high

0exploited

8.5average CVSS score

Latest first

7.8 High severity
Oracle Enterprise Manager Base Platform: Improper Privilege Management
CVE-2026-101527Oct 20, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker w
8.8 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-101518Oct 20, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network
8.1 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-70684Aug 18, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
7.8 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-61300Aug 18, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to
8.6 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-61286Aug 18, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with netwo
8.8 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-61284Aug 18, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker w
7.2 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-47006Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with
7.2 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-47005Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with
8.8 High severity
Oracle Enterprise Manager Base Platform: Missing Authentication for Critical Functionality
CVE-2026-47004Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with n
7.0 High severity
Oracle Enterprise Manager Base Platform: Missing Authentication for Critical Functionality
CVE-2026-46999Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with
8.8 High severity
Oracle Enterprise Manager Base Platform: URL Redirection to Untrusted Site
CVE-2026-46998Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with networ
7.1 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46996Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network
8.8 High severity
Oracle Enterprise Manager Base Platform: Improper Privilege Management
CVE-2026-46995Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network
9.8 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46994Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network
8.2 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46993Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with networ
8.8 High severity
Oracle Enterprise Manager Base Platform: Missing Authentication for Critical Functionality
CVE-2026-46992Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker
7.3 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46990Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacke
9.1 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46989Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network ac
7.2 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46988Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with ne
7.7 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46987Jul 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attack
9.1 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46875Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Deployment Library). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with net
9.0 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46872Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Install). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access
7.2 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46868Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker wit
7.2 High severity
Oracle Enterprise Manager Base Platform: Improper Privilege Management
CVE-2026-46867Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker wit
8.2 High severity
Oracle Enterprise Manager Base Platform: Uncontrolled Resource Consumption
CVE-2026-46866Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network
8.2 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46865Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker wit
8.8 High severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46864Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network
9.8 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46857Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker w
9.6 Critical severity
Oracle Enterprise Manager Base Platform: Improper Neutralization of Input During Web Page Generation
CVE-2026-46856Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with networ
9.9 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46855Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network
9.9 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46854Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with netwo
9.6 Critical severity
Oracle Enterprise Manager Base Platform: Improper Neutralization of Input During Web Page Generation
CVE-2026-46853Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with networ
9.9 Critical severity
Oracle Enterprise Manager Base Platform: Improper Privilege Management
CVE-2026-46852Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network
9.9 Critical severity
Oracle Enterprise Manager Base Platform: Improper Access Control
CVE-2026-46832Jun 17, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with net
9.1 Critical severity
Oracle Enterprise Manager Base Platform: Missing Authentication for Critical Functionality
CVE-2026-34279Apr 21, 2026Oracle
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with netwo