Oracle Enterprise Manager Base Platform vulnerabilities

Vulnerability in Oracle Enterprise Manager Base Platform (Agent Next Gen component) allows an unauthenticated attacker via HTTPS to fully compromise the system.

Vulnerability in Oracle Enterprise Manager Base Platform (component: UI Framework) versions 13.5 and 24.1. A low-privileged attacker with network access via HTTPS can compromise the platform, gaining unauthorized access to critical data, as well as update, insert, or delete access, and cause partial denial of service. CVSS 9.1.

Vulnerability in the Oracle Enterprise Manager Base Platform product allows a high privileged attacker with network access via HTTPS to compromise the system. Attacks may significantly impact additional products, leading to unauthorized access to critical data and the ability to cause system crashes.

A vulnerability in the Oracle Enterprise Manager Base Platform product allows a low privileged attacker with network access via HTTP to compromise the platform. Affects versions 13.5 and 24.1, and attacks may significantly impact additional products.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen) affects versions 13.5 and 24.1. It is difficult to exploit but allows an unauthenticated attacker via HTTP to take over the platform. Successful attacks result in full takeover.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen) affects versions 13.5 and 24.1. A low-privileged attacker with local access to the infrastructure can take over the platform.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Enterprise Manager Install) affects versions 13.5 and 24.1. It is difficult to exploit, requires logon to the infrastructure, and a low-privileged attacker can gain unauthorized access to critical data or all data of the platform. Attacks may impact additional products (scope change).

Vulnerability in Oracle Enterprise Manager Base Platform (component: Event Management) affects versions 13.5 and 24.1. An unauthenticated attacker with network access via HTTP can perform unauthorized modifications to critical data, gain partial access to data, and cause partial denial of service. CVSS score is 8.6.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Application Config Console) affects versions 13.5 and 24.1. A low-privileged attacker with network access via HTTP can fully compromise the system. CVSS score is 8.8.

Vulnerability in Oracle Enterprise Manager Base Platform (Self Update Framework component) allows a high-privileged attacker via HTTPS to take over the platform.

Vulnerability in Oracle Enterprise Manager Base Platform (Self Update Framework component) allows a high-privileged attacker via HTTPS to take over the platform.

Vulnerability in Oracle Enterprise Manager Base Platform product (component: UI Framework). Affects versions 13.5 and 24.1. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized access to critical data or complete access to all platform data.

Vulnerability in Oracle Enterprise Manager Base Platform (component: UI Framework). Affects versions 13.5 and 24.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS, requires user interaction. Successful attack may impact additional products (scope change) and allows unauthorized modification and read access to data.

Vulnerability in Oracle Enterprise Manager Base Platform (Web Services Framework component) allows a low-privileged attacker with network access via HTTPS to perform unauthorized update, insert, delete, and read access to some data. Easily exploitable, CVSS 5.4.

Vulnerability in Oracle Enterprise Manager Base Platform 24.1 allows a low-privileged attacker with network access via HTTPS to modify data, requiring user interaction.

Vulnerability in Oracle Enterprise Manager Base Platform (Discovery Framework component) allows an unauthenticated attacker with network access via HTTPS to modify critical data, partially read data, and cause partial denial of service. The attack is difficult to exploit.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Metadata Plugin) versions 13.5 and 24.1. A low-privileged attacker via HTTPS can gain unauthorized access to critical data (create, delete, modify).

Difficult to exploit vulnerability in Oracle Enterprise Manager Base Platform (Agent Next Gen) versions 13.5 and 24.1. A low-privileged attacker via HTTPS can gain unauthorized access to critical data and the ability to create, delete, or modify it, also affecting other products.

Vulnerability in Oracle Enterprise Manager Base Platform (Enterprise Config Management component) allows a low-privileged attacker with network access via HTTPS to take over the platform. The attack is easily exploitable.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Enterprise Config Management) versions 13.5 and 24.1. It is easily exploitable, requires local access and low privileges. Successful attack can lead to unauthorized read and modification of some data.

Vulnerability in Oracle Enterprise Manager Base Platform (Enterprise Config Management component) allows an unauthenticated attacker via HTTP to modify, read, and partially disrupt the system.

Vulnerability in Oracle Enterprise Manager Base Platform (Connector Framework component) allows a high-privileged attacker via HTTPS to take over the platform.

Vulnerability in Oracle Enterprise Manager Base Platform product (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of platform data.

Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS. Successful attack allows unauthorized read access to a subset of data.

Vulnerability in Oracle Enterprise Manager Base Platform product (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of platform data.