Login Request a demo
EM
Product
Enterprise Manager Base Platform
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
161
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities161In the news0Timeline
Severity mix
Critical 26High 68Medium 66Low 1
Severity
All severities161Critical26High68Medium66Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Enterprise Manager Base Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46997
6.5
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2020-24977
6.5
3%
Sep 3
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c
Affected: 13.4.0.0; 13.5.0.0
CVE-2018-3303
6.5
1%
Jan 16
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console)
Affected: 13.2; 13.3
CVE-2018-1656
6.5
4%
Aug 20
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal…
Affected: 13.2.0.0.0; 13.3.0.0.0
CVE-2018-1257
6.5
3%
May 11
Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a…
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2019-2897
6.4
1%
Oct 16
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions)
Affected: 13.4.0.0
CVE-2020-2609
6.3
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2016-5604
6.3
0%
Oct 25
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and…
Affected: 12.1.0.5
CVE-2016-3563
6.3
0%
Jul 21
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and…
Affected: 12.1.0.5
CVE-2026-47002
6.1
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2022-29577
6.1
1%
Apr 21
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-2053
6.1
1%
Apr 22
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework)
Affected: 13.4.0.0
CVE-2018-8032
6.1
11%
Aug 2
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services
Affected: 12.1.0.5; 13.3.0.0
CVE-2020-2645
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2644
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2643
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2642
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2639
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2636
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2635
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2634
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2633
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2632
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2631
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2630
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2629
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2628
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2626
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2625
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2624
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2623
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2622
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2621
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2620
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2619
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2618
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2617
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2616
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2615
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2613
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2612
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2611
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2610
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management)
Affected: 12.1.0.5; 13.2.0.0; 13.3.0.0
CVE-2020-2608
6.0
1%
Jan 15
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository)
Affected: 13.2.0.0; 13.3.0.0
CVE-2026-47003
5.9
0%
Jul 21
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework)
Affected: 13.5.0.0; 24.1.0.0.0
CVE-2021-45105
5.9
100%
Dec 18
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
Affected: 13.4.0.0; 13.5.0.0
CVE-2021-3537
5.9
4%
May 14
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
Affected: 13.4.0.0; 13.5.0.0
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: 13.3.0.0; 13.4.0.0
CVE-2018-0734
5.9
12%
Oct 30
Timing attack against DSA
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
CVE-2018-0735
5.9
5%
Oct 29
Timing attack against ECDSA signature generation
Affected: 12.1.0.5.0; 13.2.0.0.0; 13.3.0.0.0
Page 1 of 2 · 66 total
12