Enterprise Manager (Oracle) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2024-01-16. Vendor: Oracle.

CVEs of Enterprise Manager

CVE-2024-20916 - CVSS 8.3 (high), 2024-01-16: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). The supported version that is…
CVE-2021-2134 - CVSS 6.5 (medium), 2021-04-22: Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that…
CVE-2021-2008 - CVSS 7.3 (high), 2021-04-22: Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that…
CVE-2020-2641 - CVSS 6 (medium), 2020-01-15: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are…
CVE-2020-2640 - CVSS 6 (medium), 2020-01-15: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). Supported versions that are…
CVE-2020-2638 - CVSS 6 (medium), 2020-01-15: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions…
CVE-2020-2637 - CVSS 6 (medium), 2020-01-15: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based). Supported versions…
CVE-2019-2895 - CVSS 7.5 (high), 2019-10-16: Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins). Supported versions that…
CVE-2018-11040 - CVSS 7.5 (high), 2018-06-25: Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain…
CVE-2013-3791 - CVSS 4.3 (medium), 2013-07-17: Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote…
CVE-2013-3758 - CVSS 4.3 (medium), 2013-07-17: Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and…
CVE-2009-1967 - CVSS 5.5 (medium), 2009-07-14: Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote…
CVE-2009-1966 - CVSS 5.5 (medium), 2009-07-14: Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote…
CVE-2008-2603 - CVSS 3.5 (low), 2008-07-15: Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager,…
CVE-2007-5531 - CVSS 10 (critical), 2007-10-17: Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown…
CVE-2007-2129 - CVSS 10 (critical), 2007-04-18: Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01.
CVE-2007-0293 - CVSS 6.4 (medium), 2007-01-17: Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent…
CVE-2007-0292 - CVSS 7.5 (high), 2007-01-17: Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM01 and…
CVE-2007-0294 - CVSS 1.7 (low), 2007-01-17: Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Database Cloning & Data Guard Management, aka…
CVE-2006-3720 - CVSS 5.5 (medium), 2006-07-21: Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02.
CVE-2006-3719 - CVSS 5.5 (medium), 2006-07-21: Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.
CVE-2006-3721 - CVSS 10 (critical), 2006-07-21: Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors,…
CVE-2006-1885 - CVSS 10 (critical), 2006-04-20: Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack…
CVE-2004-1364 - CVSS 8.5 (high), 2004-08-04: Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin…
CVE-2004-1367 - CVSS 4.4 (medium), 2004-08-04: Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error…
CVE-2004-1370 - CVSS 7.5 (high), 2004-08-04: Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL…
CVE-2004-1363 - CVSS 9.8 (critical), 2004-08-04: Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded…
CVE-2004-1366 - CVSS 4.6 (medium), 2004-08-04: Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users…
CVE-2004-1369 - CVSS 5 (medium), 2004-08-04: The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing…
CVE-2004-1362 - CVSS 7.5 (high), 2004-08-04: The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character…
CVE-2004-1365 - CVSS 4.6 (medium), 2004-08-04: Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands…
CVE-2004-1368 - CVSS 7.8 (high), 2004-08-04: ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix…
CVE-2004-1371 - CVSS 9 (critical), 2004-08-04: Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.