EM
Product
Enterprise Manager Base Platform
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 68Medium 66Low 1
Watch
Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2609 | 6.3 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2016-5604 | 6.3 | Oct 25 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and… Affected: 12.1.0.5 |
| CVE-2016-3563 | 6.3 | Jul 21 | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and… Affected: 12.1.0.5 |
| CVE-2026-47002 | 6.1 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2022-29577 | 6.1 | Apr 21 | OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input Affected: 13.4.0.0; 13.5.0.0 |
| CVE-2021-2053 | 6.1 | Apr 22 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework) Affected: 13.4.0.0 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 12.1.0.5; 13.3.0.0 |
| CVE-2020-2645 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2644 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2643 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2642 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2639 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2636 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2635 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2634 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2633 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2632 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2631 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2630 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2629 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2628 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2626 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2625 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2624 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2623 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2622 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2621 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2620 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2619 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2618 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2617 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2616 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2615 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2613 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2612 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2611 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2610 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2020-2608 | 6.0 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository) Affected: 13.2.0.0; 13.3.0.0 |
| CVE-2026-47003 | 5.9 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 13.4.0.0; 13.5.0.0 |
| CVE-2021-3537 | 5.9 | May 14 | A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference Affected: 13.4.0.0; 13.5.0.0 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: 13.3.0.0; 13.4.0.0 |
| CVE-2018-0734 | 5.9 | Oct 30 | Timing attack against DSA Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2018-11039 | 5.9 | Jun 25 | Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any… Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0 |
| CVE-2026-61298 | 5.6 | Aug 18 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 12.1.0.5; 13.3.0.0; 13.4.0.0 |
| CVE-2026-47001 | 5.4 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework) Affected: 13.5.0.0; 24.1.0.0.0 |
| CVE-2020-2646 | 5.4 | Jan 15 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface) Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0 |
| CVE-2026-46986 | 5.3 | Jul 21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen) Affected: 13.5.0.0; 24.1.0.0.0 |
