Oracle Enterprise Manager for Oracle Database vulnerabilities

Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.

Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Data Guard Management) affecting versions 13.5 and 24.1. A low-privileged attacker with HTTP network access can easily exploit it to take over the product, with potential impact on additional products (scope change). CVSS 3.1 Base Score is 9.9.

Vulnerability in Oracle Enterprise Manager for Oracle Database (component: Core) affects version 24.1. A low-privileged attacker can exploit it over HTTP, leading to unauthorized access to critical data or all accessible data. Attacks may also impact additional products (scope change).