cve-2026-21962

CVE-2026-21962 — EoP / RCE POR PATH-TRAVERSAL DEBIDO A LA NORMALIZACIÓN DE URI Descubridor: gregk4sec https://github.com/gregk4sec/cve Fecha de descubrimiento: 2025-09-24 Vendor afectado: Oracle Producto afectado: Oracle OHS / Plug-in de proxy de Weblogic Server para Apache HTTP Server, Plug-in d...

The vulnerability of the Discovery Framework component (Oracle OHS) within the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Discovery Framework component Oracle OHS in the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access protected...

Oracle Enterprise Manager Cloud Control (Apr 2020 CPU)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2020 CPU advisory. - Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that...

CVE-2020-2961

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Discovery Framework Oracle OHS. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-2961

CVE-2020-2961 affects Oracle Enterprise Manager Base Platform (Discovery Framework/Oracle OHS). Connected sources confirm affected versions: 13.2.0.0 and 13.3.0.0. The vulnerability allows an unauthenticated attacker, over HTTP, to compromise the Enterprise Manager Base Platform, potentially lead...

CVE-2020-2961: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Discovery Framework Oracle OHS. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...