CVE-2024-29849

CVE-2024-29849 Bypass de autenticación de Veeam Backup Enterprise Manager CVE-2024-29849 por Sina Kheirkhah @SinSinology de SummoningTeam @SummoningTeam Análisis técnico Un análisis de la causa raíz de la vulnerabilidad se puede encontrar en mi blog Resumen ¿Versiones soportadas? Según el aviso...

CVE-2022-21392

CVE-2022-21392: Escalada Local de Privilegios mediante SUID de NMR en Oracle Enterprise Manager En instalaciones de Oracle, donde el binario “nmr” está presente y tiene el bit SUID establecido como “root”, debido a permisos de directorio inseguros, el usuario “oracle” puede elevar sus privilegios...

Oracle Enterprise Manager Cloud Control (September 2026 CSPU)

The 13.5.0.0 and 24.1.0.0 versions of Enterprise Manager Cloud Control installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified 7 vulnerabilities in various Oracle Enterprise Manager products, including Oracle Enterprise Manager Base Platform, Oracle Enterprise Manager for Fusion Middleware, and Oracle Enterprise Manager for Oracle Database. The security updates are not applicable to client-only...

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform allows a perpetrator to trigger a service failure.

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

The vulnerability of the Install component of the Oracle Enterprise Manager Base Platform software allows a perpetrator to trigger a service failure.

The vulnerability of the Install component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTPS protocol...

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the system.

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the system using the HTTPS protocol...

CVE-2026-83355

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83068

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Core. The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

EUVD-2026-79708

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83355

Oracle Enterprise Manager for Fusion Middleware (component: Metrics ) in supported versions 13.5 and 24.1 contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to fully compromise the product, resulting in takeover with high impact to confidentiali...

CVE-2026-83068

CVE-2026-83068 affects Oracle Enterprise Manager for Oracle Database (component: Core ), version 24.1 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product, with a scope change meaning attacks may significantly impact additio...

EUVD-2026-79396

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Core. The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2026-62597

Oracle Enterprise Manager Base Platform (component: Event Management ) versions 13.5 and 24.1 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via SOAP can compromise the platform, resulting in unauthorized creation, deletion, or modification of c...

EUVD-2026-79508

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...

PT-2026-92592

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Core. The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2026-83355: Improper Authentication

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2026-92877

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-62597: Improper Access Control

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...