CVE-2026-47000

LowCVSS 3.5

Published: 21/07/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Vulnerability in Oracle Enterprise Manager Base Platform 24.1 allows a low-privileged attacker with network access via HTTPS to modify data, requiring user interaction.

Risk Assessment

The risk involves unauthorized data modification in managed infrastructure, potentially disrupting system operations.

Recommendation

Update Oracle Enterprise Manager Base Platform to the latest version and educate users on security.

Original NVD description (English source)

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 3.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N).