Login Request a demo
EM
Product
Enterprise Manager Base Platform
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities161In the news0Timeline
Severity mix
Critical 26High 68Medium 66Low 1
Severity
All severities161Critical26High68Medium66Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-10878
8.6
5%
Jun 5
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation
Affected: 13.4.0.0
CVE-2021-2351
8.3
2%
Jul 21
Vulnerability in the Advanced Networking Option component of Oracle Database Server
Affected: 13.4.0.0; 13.5.0.0
CVE-2026-46993
8.2
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46866
8.2
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46865
8.2
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2020-10543
8.2
11%
Jun 5
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow
Affected: 13.4.0.0
CVE-2026-70684
8.1
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2022-21536
8.1
1%
Jul 19
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-11620
8.1
6%
Apr 7
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-11619
8.1
4%
Apr 7
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 13.3.0.0; 13.4.0.0
CVE-2026-61300
7.8
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2018-12539
7.8
0%
Aug 14
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach…
Affected: 13.2.0.0.0; 13.3.0.0.0
CVE-2026-46987
7.7
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2017-10091
7.7
2%
Aug 8
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework)
Affected: 12.1.0; 13.1.0; 13.2.0
CVE-2024-20917
7.5
0%
Feb 17
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log Management)
Affected: 13.5.0.0
CVE-2022-21623
7.5
1%
Oct 18
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console)
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-36160
7.5
63%
Sep 16
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-34798
7.5
65%
Sep 16
Malformed requests may cause the server to dereference a NULL pointer
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-11994
7.5
4%
Jul 8
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
Affected: 13.4.0.0
CVE-2020-12723
7.5
6%
Jun 5
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls
Affected: 13.4.0.0
CVE-2020-11971
7.5
14%
May 14
Apache Camel's JMX is vulnerable to Rebind Flaw
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-1967
7.5
53%
Apr 21
Segmentation fault in SSL_check_chain
Affected: 13.4.0.0
CVE-2020-7595
7.5
8%
Jan 21
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation
Affected: 13.4.0.0; 13.5.0.0
CVE-2019-20388
7.5
3%
Jan 21
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-5398
7.5
88%
Jan 16
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
Affected: 13.2.1.0
CVE-2019-0188
7.5
10%
May 28
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library
Affected: 13.3.0.0; 13.4.0.0
CVE-2019-0227
7.5
92%
May 1
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006
Affected: 12.1.0.5; 13.3.0.0
CVE-2019-5427
7.5
5%
Apr 22
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading…
Affected: 13.2.1.0
CVE-2019-0222
7.5
12%
Mar 28
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2017-9735
7.5
6%
Jun 16
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before…
Affected: 13.2; 13.3
CVE-2017-3518
7.5
3%
Apr 24
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery Framework)
Affected: 12.1.0; 13.1.0; 13.2.0
CVE-2016-2381
7.5
9%
Apr 8
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp
Affected: 13.2.0.0.0; 13.3.0.0.0
CVE-2026-46990
7.3
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2022-21516
7.3
1%
Jul 19
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install)
Affected: 13.4.0.0; 13.5.0.0
CVE-2026-47006
7.2
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-47005
7.2
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46988
7.2
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46868
7.2
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46867
7.2
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46996
7.1
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2020-2982
7.1
1%
Jul 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 13.3.0.0; 13.4.0.0
CVE-2018-2750
7.1
1%
Apr 19
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: UI Framework)
Affected: 12.1.0.5
CVE-2026-46999
7.0
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46997
6.5
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2020-24977
6.5
3%
Sep 3
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c
Affected: 13.4.0.0; 13.5.0.0
CVE-2018-3303
6.5
1%
Jan 16
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console)
Affected: 13.2; 13.3
CVE-2018-1656
6.5
4%
Aug 20
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal…
Affected: 13.2.0.0.0; 13.3.0.0.0
CVE-2018-1257
6.5
3%
May 11
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a…
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2019-2897
6.4
1%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 13.4.0.0
Page 2 of 4 · 161 total
1234