EM
Product
Enterprise Manager Base Platform
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 68Medium 66Low 1
Watch
Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0188 | 7.5 | May 28 | Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library Affected: 13.3.0.0; 13.4.0.0 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 12.1.0.5; 13.3.0.0 |
| CVE-2019-5427 | 7.5 | Apr 22 | c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading… Affected: 13.2.1.0 |
| CVE-2019-0222 | 7.5 | Mar 28 | In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2017-9735 | 7.5 | Jun 16 | Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before… Affected: 13.2; 13.3 |
| CVE-2017-3518 | 7.5 | Apr 24 | Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery Framework) Affected: 12.1.0; 13.1.0; 13.2.0 |
| CVE-2016-2381 | 7.5 | Apr 8 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp Affected: 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2026-46990 | 7.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2022-21516 | 7.3 | Jul 19 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install) Affected: 13.4.0.0; 13.5.0.0 |
| CVE-2026-47006 | 7.2 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-47005 | 7.2 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46988 | 7.2 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46868 | 7.2 | Jun 16 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46867 | 7.2 | Jun 16 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2026-46996 | 7.1 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2020-2982 | 7.1 | Jul 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 13.3.0.0; 13.4.0.0 |
| CVE-2018-2750 | 7.1 | Apr 19 | Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: UI Framework) Affected: 12.1.0.5 |
| CVE-2026-46999 | 7.0 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework) Affected: 13.5.0.0; 24.1.0.0.0 |