EM
Product
Enterprise Manager Base Platform
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 26High 68Medium 66Low 1
Watch

Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2609
6.3
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2016-5604
6.3
0%
Oct 25
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and…
Affected: 12.1.0.5
CVE-2016-3563
6.3
0%
Jul 21
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and…
Affected: 12.1.0.5
CVE-2026-47002
6.1
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2022-29577
6.1
1%
Apr 21
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-2053
6.1
1%
Apr 22
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework)
Affected: 13.4.0.0
CVE-2018-8032
6.1
11%
Aug 2
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services
Affected: 12.1.0.5; 13.3.0.0
CVE-2020-2645
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2644
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2643
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2642
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2639
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2636
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2635
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2634
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2633
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2632
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2631
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2630
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2629
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2628
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2626
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2625
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2624
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2623
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2622
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2621
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2620
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2619
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2618
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2617
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2616
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2615
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2613
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2612
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2611
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2610
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2608
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository)
Affected: 13.2.0.0; 13.3.0.0
CVE-2026-47003
5.9
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2021-45105
5.9
100%
Dec 18
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-3537
5.9
4%
May 14
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: 13.3.0.0; 13.4.0.0
CVE-2018-0734
5.9
12%
Oct 30
Timing attack against DSA
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2018-0735
5.9
5%
Oct 29
Timing attack against ECDSA signature generation
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2018-11039
5.9
3%
Jun 25
Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any…
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2026-61298
5.6
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2019-12415
5.5
1%
Oct 23
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files…
Affected: 12.1.0.5; 13.3.0.0; 13.4.0.0
CVE-2026-47001
5.4
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Services Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2020-2646
5.4
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2026-46986
5.3
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
Page 3 of 4 · 161 total