Vulnerabilidades do Oracle Enterprise Manager For Oracle Database
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Enterprise Manager For Oracle Database: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:enterprise_manager_for_oracle_database
CVE-2026-83068
Alta · 7.7
CWE-284 15/09/2026
Improper Access Control em Oracle Enterprise Manager For Oracle Database
Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager for Oracle Database. While the vulnerability is in Oracle Enterprise Manager for Oracle Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Manager for Oracle Database accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
CVE-2021-20227
Média · 5.5
CWE-416 23/03/2021
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an...
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.
CVE-2017-5645
Crítica · 9.8
Exploit público CWE-502 17/04/2017
Deserialization of Untrusted Data em Apache Software Foundation Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.