Oracle Enterprise Manager Cloud Control (October 2026 CPU)

The 13.5.0.0 and 24.1.0.0 versions of Enterprise Manager Cloud Control installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager componen...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

EUVD-2026-105939

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

EUVD-2026-105936

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-105931

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-105925

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101527

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-101524

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-101518

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101511

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101527

A vulnerability exists in the Enterprise Manager Install component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with logon access to the underlying infrastructure can easily exploit this flaw to comprom...

CVE-2026-101524

A vulnerability exists in the Security Framework component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the pl...

CVE-2026-101518

A vulnerability exists in the Agent Next Gen component of the Oracle Enterprise Manager Base Platform product, specifically affecting supported versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful explo...

CVE-2026-101511

A vulnerability exists in the Metadata Plugin component of the Oracle Enterprise Manager Base Platform (Oracle Enterprise Manager) affecting versions 13.5 and 24.1 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the platform, potentially leading to una...

PT-2026-119208

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-119211

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

PT-2026-119203

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Target Management Oracle Enterprise Manager Compromise

The vulnerability of the Target Management component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the system using the HTTPS protocol...

Oracle Enterprise Manager Base Platform DoS

The vulnerability of the Agent Next Gen component of the Oracle Enterprise Manager Base Platform software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP network protocol...

Oracle Enterprise Manager Install DoS

The vulnerability of the Install component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTPS protocol...