EM
Product
Enterprise Manager Base Platform
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 68Medium 66Low 1
Watch
Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46985 | 5.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46984 | 5.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2020-1954 | 5.3 | Apr 1 | Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus Affected: 13.2.1.0; 13.2.1.0 |
| CVE-2020-5397 | 5.3 | Jan 17 | Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux… Affected: 13.2.1.0 |
| CVE-2019-10247 | 5.3 | Apr 22 | In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 13.2; 13.3 |
| CVE-2019-10246 | 5.3 | Apr 22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 13.2; 13.3 |
| CVE-2022-21469 | 4.7 | Apr 19 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework) Affected: 13.4.0.0; 13.5.0.0 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2026-46991 | 4.4 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2016-3540 | 4.3 | Jul 21 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect… Affected: 12.1.0.5; 13.1.0.0 |
| CVE-2026-47000 | 3.5 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework) Affected: 24.1.0.0.0 |