Oracle Enterprise Manager Cloud Control (October 2026 CPU)

The 13.5.0.0 and 24.1.0.0 versions of Enterprise Manager Cloud Control installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager componen...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

EUVD-2026-105939

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

EUVD-2026-105936

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-105931

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-105925

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101527

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-101518

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101524

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-101511

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101527

A vulnerability exists in the Enterprise Manager Install component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to comprom...

CVE-2026-101524

A vulnerability exists in the Security Framework component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the pl...

CVE-2026-101518

A vulnerability exists in the Agent Next Gen component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful explo...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

PT-2026-119211

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

PT-2026-119208

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-119203

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2026-119197

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle Enterprise Manager Base Platform security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager Base Platform contain a security vulnerability stemming from issues within the Enterprise Manager Install component. This vulnerability may allow low-privilege attackers to log in and take over the infrastructure of Oracle Enterprise Manager Bas...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Agent Next Gen component, which may allow attackers with low privileges to gain control of the Oracle Enterprise Manager Base Platform through HTTP network...