Login Request a demo
EM
Product
Enterprise Manager Base Platform
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities161In the news0Timeline
Severity mix
Critical 26High 68Medium 66Low 1
Severity
All severities161Critical26High68Medium66Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-11776
In wildKEV
8.1
100%
Aug 22
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like…
Affected: 13.3.0.0; 13.4.0.0
CVE-2026-61284
8.8
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-47004
8.8
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46998
8.8
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46995
8.8
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46992
8.8
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46864
8.8
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2024-21067
8.8
0%
Apr 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)
Affected: 13.5.0.0
CVE-2022-21392
8.8
1%
Jan 19
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)
Affected: 13.4.0.0; 13.5.0.0
CVE-2022-23307
8.8
54%
Jan 18
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
Affected: 13.4.0.0; 13.5.0.0
CVE-2022-23302
8.8
64%
Jan 18
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration…
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-2137
8.8
1%
Oct 20
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-3518
8.8
22%
May 18
There's a flaw in libxml2 in versions before 2.9.11
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-11113
8.8
6%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-11112
8.8
4%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-11111
8.8
4%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms,…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-10969
8.8
4%
Mar 26
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-10968
8.8
4%
Mar 26
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-10673
8.8
8%
Mar 18
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-10672
8.8
3%
Mar 18
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 13.3.0.0; 13.4.0.0
CVE-2019-5064
8.8
11%
Jan 3
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0
Affected: 13.4.0.0
CVE-2019-5063
8.8
21%
Jan 3
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0
Affected: 13.4.0.0
CVE-2026-61286
8.6
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2021-3517
8.6
17%
May 19
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-10878
8.6
5%
Jun 5
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation
Affected: 13.4.0.0
CVE-2021-2351
8.3
2%
Jul 21
Vulnerability in the Advanced Networking Option component of Oracle Database Server
Affected: 13.4.0.0; 13.5.0.0
CVE-2026-46993
8.2
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46866
8.2
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2026-46865
8.2
0%
Jun 16
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2020-10543
8.2
11%
Jun 5
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow
Affected: 13.4.0.0
CVE-2026-70684
8.1
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2022-21536
8.1
1%
Jul 19
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-11620
8.1
6%
Apr 7
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka…
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-11619
8.1
4%
Apr 7
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 13.3.0.0; 13.4.0.0
CVE-2026-61300
7.8
0%
Aug 18
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2018-12539
7.8
0%
Aug 14
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach…
Affected: 13.2.0.0.0; 13.3.0.0.0
CVE-2026-46987
7.7
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2017-10091
7.7
2%
Aug 8
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework)
Affected: 12.1.0; 13.1.0; 13.2.0
CVE-2024-20917
7.5
0%
Feb 17
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log Management)
Affected: 13.5.0.0
CVE-2022-21623
7.5
1%
Oct 18
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console)
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-36160
7.5
63%
Sep 16
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-34798
7.5
65%
Sep 16
Malformed requests may cause the server to dereference a NULL pointer
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-11994
7.5
4%
Jul 8
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
Affected: 13.4.0.0
CVE-2020-12723
7.5
6%
Jun 5
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls
Affected: 13.4.0.0
CVE-2020-11971
7.5
14%
May 14
Apache Camel's JMX is vulnerable to Rebind Flaw
Affected: 13.3.0.0; 13.4.0.0
CVE-2020-1967
7.5
53%
Apr 21
Segmentation fault in SSL_check_chain
Affected: 13.4.0.0
CVE-2020-7595
7.5
8%
Jan 21
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation
Affected: 13.4.0.0; 13.5.0.0
CVE-2019-20388
7.5
3%
Jan 21
xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-5398
7.5
88%
Jan 16
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
Affected: 13.2.1.0
Page 1 of 2 · 68 total
12