Vulnerabilities

Filters

Reset all

2 selected

33 records

Sort

Vendor: Oracle Component: Enterprise Manager Clear all filters

TI-2024-13709 CVE-2024-20916 · GHSA-3x82-g63q-53gm

Improper access control in Oracle Enterprise Manager Base Platform

LOW 38

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).

CVSS 3.1HIGH 8.3 Adjacent network High privileges No interaction EPSS 0.00344 Published 2024-01-16 No fix listed CWE-284

TI-2021-01816 CVE-2021-2134 · GHSA-mhm6-75wq-4mqh

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle…

LOW 31

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00915 Published 2021-04-22 No fix listed

TI-2021-01694 CVE-2021-2008 · GHSA-r688-j345-w6v4

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle…

MEDIUM 40

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin).

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00907 Published 2021-04-22 No fix listed

TI-2020-02344 CVE-2020-2641 · GHSA-gv4h-75pq-7634

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise…

LOW 29

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework).

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.01205 Published 2020-01-15 No fix listed

TI-2020-02343 CVE-2020-2640 · GHSA-923r-h6jv-6xm3

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise…

LOW 29

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management).

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.01205 Published 2020-01-15 No fix listed

TI-2020-02341 CVE-2020-2638 · GHSA-6mrj-g9r6-6j85

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise…

LOW 29

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management).

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.01205 Published 2020-01-15 No fix listed

TI-2020-02340 CVE-2020-2637 · GHSA-m72h-8jmp-jgxx

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise…

LOW 29

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based).

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.01159 Published 2020-01-15 No fix listed

TI-2019-02428 CVE-2019-2895 · GHSA-jhj3-mv3h-5429

Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager…

LOW 37

Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01215 Published 2019-10-16 No fix listed

TI-2018-07828 CVE-2018-11040 · GHSA-f26x-pr96-vw86

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older…

MEDIUM 45

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpRespons…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0318 Published 2018-06-25 Partial fix · 5.0.7, 4.3.18 +2 CWE-829

TI-2013-03304 CVE-2013-3791 · GHSA-c6v8-h677-3vr4

Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB…

LOW 23

Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01395 Published 2013-07-17 No fix listed

TI-2013-03271 CVE-2013-3758 · GHSA-35q6-95hx-g7w3

Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and…

LOW 22

Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01215 Published 2013-07-17 No fix listed

TI-2009-01875 CVE-2009-1967 · GHSA-6v6x-8c4v-jw69

Unspecified vulnerability in the Config Management component in (1) Oracle Database…

LOW 27

Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknow…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01195 Published 2009-07-14 No fix listed

TI-2009-01874 CVE-2009-1966 · GHSA-fmgc-6ph7-vh6x

Unspecified vulnerability in the Config Management component in (1) Oracle Database…

LOW 27

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01195 Published 2009-07-14 No fix listed

TI-2008-02493 CVE-2008-2603 · GHSA-6v82-6v76-xfp5

Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5…

LOW 19

Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01204 Published 2008-07-15 No fix listed

TI-2007-05316 CVE-2007-5531 · GHSA-5w5c-w4c9-m2w4

Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server…

MEDIUM 49

Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0363 Published 2007-10-17 No fix listed

TI-2007-02050 CVE-2007-2129 · GHSA-6mmv-f2gv-mm85

Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has…

MEDIUM 47

Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02238 Published 2007-04-18 No fix listed

TI-2007-00285 CVE-2007-0294 · GHSA-pr44-69xr-63jj

Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and…

LOW 10

Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Database Cloning & Data Guard Management, aka EM06.

CVSS 2.0LOW 1.7 Local Low privileges Interaction — EPSS 0.00413 Published 2007-01-17 No fix listed

TI-2007-00284 CVE-2007-0293 · GHSA-fhch-36p7-phf8

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1…

LOW 33

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent (EM03) and (2) EM04 and (3) EM05 in Enterprise Manager Console.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02658 Published 2007-01-17 No fix listed

TI-2007-00283 CVE-2007-0292 · GHSA-7rm7-hf9f-8hgx

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown…

LOW 38

Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM01 and (2) EM02.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.031 Published 2007-01-17 No fix listed

TI-2006-03608 CVE-2006-3721 · GHSA-mmwp-cgpp-m5xv

Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise…

MEDIUM 50

Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 and EM04.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04072 Published 2006-07-19 No fix listed

TI-2006-03607 CVE-2006-3720 · GHSA-h9r9-w84g-jgpj

Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager…

LOW 29

Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02208 Published 2006-07-19 No fix listed

TI-2006-03606 CVE-2006-3719 · GHSA-5x2q-23xv-cvxh

Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and…

LOW 29

Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02208 Published 2006-07-19 No fix listed

TI-2006-01830 CVE-2006-1885 · GHSA-wwqx-3gpv-gf7j

Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle…

MEDIUM 50

Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM01 and (2) EM02.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04668 Published 2006-04-20 No fix listed

TI-2004-01248 CVE-2004-1371 · GHSA-v4v5-xmrp-3656

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute…

MEDIUM 52

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.10767 Published 2005-01-19 No fix listed CWE-119

TI-2004-01247 CVE-2004-1370 · GHSA-wcpw-pcq8-4pwf

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights…

LOW 39

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03856 Published 2005-01-19 No fix listed