EM
Product
Enterprise Manager Base Platform
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 68Medium 66Low 1
Watch
Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-11039 | 5.9 | Jun 25 | Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any… Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2026-61298 | 5.6 | Aug 18 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 12.1.0.5; 13.3.0.0; 13.4.0.0 |
| CVE-2026-47001 | 5.4 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2020-2646 | 5.4 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2026-46986 | 5.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46985 | 5.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46984 | 5.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2020-1954 | 5.3 | Apr 1 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus Affected: 13.2.1.0; 13.2.1.0 |
| CVE-2020-5397 | 5.3 | Jan 17 | Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux… Affected: 13.2.1.0 |
| CVE-2019-10247 | 5.3 | Apr 22 | In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 13.2; 13.3 |
| CVE-2019-10246 | 5.3 | Apr 22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 13.2; 13.3 |
| CVE-2022-21469 | 4.7 | Apr 19 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework) Affected: 13.4.0.0; 13.5.0.0 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2026-46991 | 4.4 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2016-3540 | 4.3 | Jul 21 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect… Affected: 12.1.0.5; 13.1.0.0 |