CVE-2022-21536: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Policy Framework. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterpris...

CVE-2022-21469: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterpris...

CVE-2022-21392: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Policy Framework. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2022-2132 · Oracle · Enterprise Manager Base Platform

Name of the Vulnerable Software and Affected Versions: Enterprise Manager Base Platform versions 13.4.0.0 through 13.5.0.0 Description: The issue is related to insufficient input validation in the Policy Framework component. It allows a low-privileged attacker with network access via HTTP to...

CVE-2021-2137

CVE-2021-2137 affects Oracle Enterprise Manager Base Platform (Policy Framework) and is reported to impact versions 13.4.0.0 and 13.5.0.0. The vulnerability enables a low-privileged, network-accessing attacker over HTTP to compromise the Base Platform and potentially take over the system. Multipl...

PT-2021-14452

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 13.4.0.0 and 13.5.0.0 Description A vulnerability in the Policy Framework component of Oracle Enterprise Manager's Enterprise Manager Base Platform allows a low-privileged attacker with network access via HTT...

CVE-2021-2137: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Policy Framework. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Oracle JDeveloper XXE (July 2021 CPU)

The version of Oracle JDeveloper installed on the remote host is prior to 12.2.1.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2021 CPU advisory: - Vulnerability in the Essbase product of Oracle Essbase component: Infrastructure Apache Commons Compress. The...

Oracle Enterprise Manager Cloud Control (Jul 2021 CPU)

The 13.4.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2021 CPU advisory. - Vulnerability in the StorageTek Tape Analytics SW Tool product of Oracle Systems component: Software dom4j. The supported...

CVE-2021-2053

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Ba...

PT-2021-2940

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform version 13.4.0.0 Description The issue is related to insufficient input validation in the UI Framework component. It allows an unauthenticated attacker with network access via HTTP to compromise the Enterprise...

CVE-2021-2053: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: UI Framework. The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Ba...

Unspecified Vulnerability in Oracle Enterprise Manager Manager Base Platform

Oracle Enterprise Manager is a set of local management platform of the United States Oracle Oracle. The platform is primarily used to manage Oracle product deployments. A security vulnerability exists in Oracle Enterprise Manager Manager Base Platform. An attacker could exploit the vulnerability ...

CVE-2020-2982: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 13.3.0.0 and 13.4.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2020-3240

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 13.3.0.0 through 13.4.0.0 Description The issue is related to insufficient input validation in the Enterprise Config Management component. It allows a low-privileged attacker with network access...

Oracle Enterprise Manager Cloud Control (Apr 2020 CPU)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2020 CPU advisory. - Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that...

PT-2020-2135

Name of the Vulnerable Software and Affected Versions Enterprise Manager Base Platform versions 13.2.0.0 through 13.3.0.0 Description The issue is related to insufficient access control in the Discovery Framework component of the Enterprise Manager Base Platform, allowing a remote attacker to...

The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform allows a malicious individual to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, obtain unauthorized access to protected information, ...