CVE-2024-29849

CVE-2024-29849 Veeam Backup Enterprise Manager Authentication Bypass CVE-2024-29849 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Supported versions? According to Veeam official advisory...

Oracle Enterprise Manager Cloud Control (October 2026 CPU)

The 13.5.0.0 and 24.1.0.0 versions of Enterprise Manager Cloud Control installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager componen...

Oracle Enterprise Manager Cloud Control 24.1 (October 2026 CPU)

The 24.1.0.0 version of Enterprise Manager Cloud Control installed on the remote host is affected by a vulnerability as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: API Gateway...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

CVE-2022-21392

CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager In Oracle installations, where the “nmr” binary is present and SUID-ed as “root”, due to insecure directory permissions, the “oracle” user can elevate his/her privileges to that of the “root” user by replacing th...

EUVD-2026-105939

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

EUVD-2026-105938

Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager component: Configuration Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-105940

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Data Guard Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-105941

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Data Guard Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-105936

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-105937

Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager component: Configuration Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-105931

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-105925

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Metadata Plugin. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

How to Prevent a Service Provider License From Being Pushed to Managed Veeam Backup Servers

Veeam Cloud Service Providers Only This registry value is intended only for Veeam Cloud Service Providers who manage multiple Veeam Backup Servers with a centralized Veeam Backup Enterprise Manager server. Adding this value to an end-user deployment of Veeam Backup Enterprise Manager may violate...

CVE-2026-101527

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-101529

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Data Guard Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-101528

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Data Guard Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-101525

Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager component: Configuration Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-101518

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Agent Next Gen. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-101524

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Security Framework. Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...