Oracle Enterprise Manager For Oracle Database vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Oracle Enterprise Manager For Oracle Database: 3 record(s), with affected versions and fixes.cpe:2.3:a:oracle:enterprise_manager_for_oracle_database
CVE-2026-83068
High · 7.7
CWE-284 Sep 15, 2026
Improper Access Control in Oracle Enterprise Manager For Oracle Database
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Oracle Database. While the vulnerability is in Oracle Enterprise Manager for Oracle Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Oracle Database accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
CVE-2021-20227
Medium · 5.5
CWE-416 Mar 23, 2021
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an...
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.
CVE-2017-5645
Critical · 9.8
Public exploit CWE-502 Apr 17, 2017
Deserialization of Untrusted Data in Apache Software Foundation Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.