CVE-2026-83068
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Core) affects version 24.1. A low-privileged attacker can exploit it over HTTP, leading to unauthorized access to critical data or all accessible data. Attacks may also impact additional products (scope change).
Risk Assessment
The risk involves potential unauthorized access to sensitive data managed by Enterprise Manager, compromising confidentiality. Scope change may increase impact on other systems.
Recommendation
Apply Oracle's patches for version 24.1 and restrict network access to authorized administrators only.
Other vulnerabilities in Oracle Enterprise Manager for Oracle Database
See all- CVE-2026-101529Critical
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
- CVE-2026-101528Critical
Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.
Original NVD description (English source)
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Oracle Database. While the vulnerability is in Oracle Enterprise Manager for Oracle Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Oracle Database accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS