Oracle Enterprise Manager Cloud Control (July 2026 CPU)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(330415);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/29");

  script_cve_id(
    "CVE-2014-3643",
    "CVE-2020-9547",
    "CVE-2025-8916",
    "CVE-2026-46984",
    "CVE-2026-46985",
    "CVE-2026-46986",
    "CVE-2026-46987",
    "CVE-2026-46988",
    "CVE-2026-46989",
    "CVE-2026-46990",
    "CVE-2026-46991",
    "CVE-2026-46992",
    "CVE-2026-46993",
    "CVE-2026-46994",
    "CVE-2026-46995",
    "CVE-2026-46996",
    "CVE-2026-46997",
    "CVE-2026-46998",
    "CVE-2026-46999",
    "CVE-2026-47000",
    "CVE-2026-47001",
    "CVE-2026-47002",
    "CVE-2026-47003",
    "CVE-2026-47004",
    "CVE-2026-47005",
    "CVE-2026-47006"
  );
  script_xref(name:"IAVA", value:"2026-A-0753");

  script_name(english:"Oracle Enterprise Manager Cloud Control (July 2026 CPU)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by multiple vulnerabilities");
  script_set_attribute(attribute:"description", value:
"The 13.5 and 24.1 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple
vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component:
    Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows
    unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform.
    Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform.
    (CVE-2026-46994)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component:
    Security Framework (jackson-databind)). Supported versions that are affected are 13.5 and 24.1. Easily
    exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle
    Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle
    Enterprise Manager Base Platform. (CVE-2020-9547)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component:
    UI Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows
    low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform.
    While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may significantly impact
    additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access
    to critical data or complete access to all Oracle Enterprise Manager Base Platform accessible data as well as
    unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data
    and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Manager Base
    Platform. (CVE-2026-46989)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/docs/tech/security-alerts/cpujul2026csaf.json");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/cpujul2026.html");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the July 2026 Oracle Critical Patch Update advisory.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_supplemental", value:"CVSS:4.0/S:P/R:U/RE:M/U:Amber");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-46994");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2020-9547");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2025-8916");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/07/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/07/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/28");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:enterprise_manager");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("oracle_enterprise_manager_installed.nbin");
  script_require_keys("installed_sw/Oracle Enterprise Manager Cloud Control");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Oracle Enterprise Manager Cloud Control', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {
          'min_version' : '13.5.0.0', 'fixed_version' : '13.5.0.32', 'fixed_display' : '13.5.0.32 (Patch 39548693)',
          'report': {'cves': [
            'CVE-2014-3643','CVE-2020-9547','CVE-2025-8916',
            'CVE-2026-46984','CVE-2026-46985','CVE-2026-46986','CVE-2026-46987','CVE-2026-46988','CVE-2026-46989',
            'CVE-2026-46990','CVE-2026-46991','CVE-2026-46992','CVE-2026-46993','CVE-2026-46994','CVE-2026-46995',
            'CVE-2026-46996','CVE-2026-46997','CVE-2026-46998','CVE-2026-46999','CVE-2026-47001','CVE-2026-47002',
            'CVE-2026-47003','CVE-2026-47004','CVE-2026-47005','CVE-2026-47006'
          ]}
        },
        {
          'min_version' : '24.1.0.0', 'fixed_version' : '24.1.0.11', 'fixed_display' : '24.1.0.11 (Patch 39466468)',
          'report': {'cves': [
            'CVE-2020-9547','CVE-2025-8916',
            'CVE-2026-46984','CVE-2026-46985','CVE-2026-46986','CVE-2026-46987','CVE-2026-46988','CVE-2026-46989',
            'CVE-2026-46990','CVE-2026-46991','CVE-2026-46992','CVE-2026-46993','CVE-2026-46994','CVE-2026-46995',
            'CVE-2026-46996','CVE-2026-46997','CVE-2026-46998','CVE-2026-46999','CVE-2026-47000','CVE-2026-47001',
            'CVE-2026-47002','CVE-2026-47003','CVE-2026-47004','CVE-2026-47005','CVE-2026-47006'
          ]}
        }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);