EM
Product
Enterprise Manager
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 0
Watch
Add Enterprise Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1363 | 9.8 | Aug 4 | Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check… Affected: 9; 9.0.1 |
| CVE-2024-20916 | 8.3 | Jan 16 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management) Affected: 13.5.0.0 |
| CVE-2019-2895 | 7.5 | Oct 16 | Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins) Affected: 12.1.0.5.0; 13.2.2.0.0; 13.3.1.0.0; 13.3.2.0.0 |
| CVE-2018-11040 | 7.5 | Jun 25 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON… Affected: 13.2 |
| CVE-2021-2008 | 7.3 | Apr 22 | Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin) Affected: 11.1.1.9; 12.2.1.3 |
| CVE-2021-2134 | 6.5 | Apr 22 | Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin) Affected: 12.2.1.4 |
| CVE-2020-2641 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2640 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2638 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2637 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2013-3791 | – | Jul 17 | Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect… Affected: 10.2.0.5 |
| CVE-2013-3758 | – | Jul 17 | Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for… Affected: 10.2.0.5; 11.1.0.1 |
| CVE-2009-1967 | – | Jul 14 | Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect… Affected: 10.2.0.4 |
| CVE-2009-1966 | – | Jul 14 | Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect… Affected: 10.2.0.4 |
| CVE-2008-2603 | – | Jul 15 | Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and… Affected: 10.1.0.5; 10.2.0.4; 11.1.0.6 |
| CVE-2007-5531 | – | Oct 17 | Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote… Affected: 10.1.0.6 |
| CVE-2007-2129 | – | Apr 18 | Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01 Affected: 9.2.0.8 |
| CVE-2007-0294 | – | Jan 17 | Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Database Cloning & Data Guard Management, aka EM06 Affected: 10.2.0.1 |
| CVE-2007-0292 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM01 and (2) EM02 Affected: 10.1.0.5 |
| CVE-2007-0293 | – | Jan 17 | Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent (EM03) and (2) EM04 and… Affected: 10.1.0.5; 10.2.0.1 |
| CVE-2006-3721 | – | Jul 21 | Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03… Affected: 10.1.0.5; 10.2.0.1 |
| CVE-2006-3720 | – | Jul 21 | Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02 Affected: 10.1.0.3 |
| CVE-2006-3719 | – | Jul 21 | Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01 Affected: 9.0.1.0; 9.2.0.1 |
| CVE-2006-1885 | – | Apr 20 | Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1)… Affected: 9.0.1.5; 9.2.0.7 |
| CVE-2004-1368 | – | Aug 4 | ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script Affected: 9; 9.0.1 |
| CVE-2004-1367 | – | Aug 4 | Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the… Affected: 9; 9.0.1 |
| CVE-2004-1366 | – | Aug 4 | Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA… Affected: 9; 9.0.1 |
| CVE-2004-1365 | – | Aug 4 | Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user Affected: 9; 9.0.1 |
| CVE-2004-1362 | – | Aug 4 | The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which… Affected: 9; 9.0.1 |
| CVE-2004-1364 | – | Aug 4 | Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory Affected: 9; 9.0.1 |
| CVE-2004-1371 | – | Aug 4 | Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure Affected: 9; 9.0.1 |
| CVE-2004-1370 | – | Aug 4 | Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain… Affected: 9; 9.0.1 |
| CVE-2004-1369 | – | Aug 4 | The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used… Affected: 9; 9.0.1 |
Showing 33