PT-2020-1478

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Application Service Level Mgmt component. It allows a high-privileged attacker with network...

PT-2020-1443

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Configuration Standard Framewk component. It allows a high-privileged attacker with network access vi...

PT-2020-1498

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, and 13.3.0.0 Description The issue is related to inadequate access control in the Enterprise Config Management component. It allows a high-privileged attacker with network...

PT-2020-1497

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, and 13.3.0.0 Description The issue is related to insufficient access control in the Enterprise Config Management component. It allows a high-privileged attacker with network...

PT-2020-1441

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform versions 13.2.0.0 through 13.3.0.0 Description The issue is related to errors in resource release in the Repository component of the Enterprise Manager Base Platform. Exploitation of this issue can allow a remo...

PT-2020-1484

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Job System component of the Enterprise Manager Base Platform. It can be exploited by a remote attacke...

Code injection

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite subcomponent: EM Console. Supported versions that are affected are 13.2 and 13.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in the Enterprise Manager Base Platform component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2018-2750: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite subcomponent: UI Framework. The supported version that is affected is 12.1.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10091: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-3518

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: Discovery Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access v...

CVE-2017-3518: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: Discovery Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access v...

CVE-2016-5604: Improper Access Control

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563...

Apache MyFaces Trinidad CVE-2016-5019 Remote Code Execution Vulnerability

Description Apache MyFaces Trinidad is prone to a security vulnerability. Successfully exploiting this issue allows attackers to obtain sensitive information or execute arbitrary code in the context of the affected application. Apache MyFaces Trinidad 1.2.14-core , 1.0.13-core , 2.0.1-core and...

CVE-2016-3563: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604...

CVE-2016-3540: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect confidentiality via vectors related to UI Framework...

PT-2016-5559

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0.5 through 13.1.0.0 Description The issue affects confidentiality and is related to the UI Framework in the Enterprise Manager Base Platform component. Recommendations For versions 12.1.0.5...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality via unknown vectors related to Agent Next Gen...

PT-2016-4218

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different...