494 matches found
CVE-2020-2628
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Host Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2633
Affected product: Oracle Enterprise Manager Base Platform (Connector Framework). Vulnerability (CVE-2020-2633): Easily exploitable, high-privilege attacker with network access via HTTP can compromise the Base Platform, leading to unauthorized data access, data modification, and partial denial of ...
CVE-2020-2643
CVE-2020-2643 affects the Oracle Enterprise Manager Base Platform, specifically the Job System. Affected versions are 12.1.0.5, 13.2.0.0, and 13.3.0.0. The vulnerability allows a high-privileged attacker with network access over HTTP to compromise the Enterprise Manager Base Platform, potentially...
CVE-2020-2626
CVE-2020-2626 affects Oracle Enterprise Manager Cloud Control Manager – OMS within the Enterprise Manager Base Platform. Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability enables a high-privileged attacker with network access over HTTP to compromise the Base Platform, poten...
CVE-2020-2642
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2630
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Extensibility Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2625
Oracle Enterprise Manager Base Platform (Job System) is affected by CVE-2020-2625 in versions 12.1.0.5, 13.2.0.0, and 13.3.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the Base Platform, potentially leading to unauthorized data access and modi...
CVE-2020-2639
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Host Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2624
Oracle Enterprise Manager Base Platform, Connector Framework is affected (CVE-2020-2624). The connected Nessus plugin lists affected versions: 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability path is described as an easily exploitable issue allowing a high-privileged attacker with network acces...
CVE-2020-2630
CVE-2020-2630 affects Oracle Enterprise Manager Base Platform (Extensibility Framework). Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high-privileged attacker with network access via HTTP to compromise the Base Platform, potentially leading to unauthorized acc...
CVE-2020-2631
CVE-2020-2631 affects Oracle Enterprise Manager Base Platform (component: Application Service Level Mgmt) in Oracle Enterprise Manager. Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability is exploitable over HTTP with network access and requires HIGH privileges; successful ex...
CVE-2020-2628
CVE-2020-2628 affects Oracle Enterprise Manager Base Platform (Host Management) with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially leading to unauth...
CVE-2020-2632
CVE-2020-2632 affects Oracle Enterprise Manager Base Platform (System Monitoring). Public sources in the provided documents identify affected product and versions: 12.1.0.5, 13.2.0.0, and 13.3.0.0. The vulnerability is described as a high-privilege, network-accessible issue via HTTP that could al...
CVE-2020-2616
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Repository. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via...
CVE-2020-2621
CVE-2020-2621 affects Oracle Enterprise Manager Base Platform, specifically the Enterprise Config Management component. Publicly affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability enables a high-privileged attacker with network access over HTTP to compromise the Base Platfor...
CVE-2020-2612
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...
CVE-2020-2610
CVE-2020-2610 affects Oracle Enterprise Manager Base Platform, specifically the Enterprise Config Management component, with affected versions 12.1.0.5, 13.2.0.0 and 13.3.0.0. The Nessus entry confirms this vulnerability is exploitable remotely via HTTP by a highly privileged attacker, potentiall...
CVE-2020-2623
CVE-2020-2623 describes a vulnerability in Oracle Enterprise Manager (OEM) Base Platform, specifically the Metrics Framework. Affected versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The flaw is reportedly exploitable by a high-privilege attacker with network access over HTTP, potentially allowing ...
CVE-2020-2622
CVE-2020-2622 affects Oracle Enterprise Manager Base Platform (Event Management) and is listed in the Oracle Enterprise Manager Jan 2020 CPU advisory as affecting the Enterprise Manager Base Platform components. Affected versions include 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability is explo...
CVE-2020-2608
CVE-2020-2608 affects Oracle Enterprise Manager Base Platform (Repository) with vulnerable versions 13.2.0.0 and 13.3.0.0. The issue allows a high-privilege attacker with network access over HTTP to gain unauthorized access to data across Enterprise Manager Base Platform, plus unauthorized update...