Skip to content
OpenAdvisories
High NCSC-2026-0125 3 CVEs

Kwetsbaarheden verholpen in Oracle Enterprise Manager

Published Apr 22, 2026 · Updated Apr 22, 2026 · nl

Vendor: Oracle Product: Enterprise Manager Base Platform

Summary

Oracle heeft kwetsbaarheden verholpen in Enterprise Manager Base Platform (13.5, 24.1).

Details

Interpretaties
De kwetsbaarheden stellen niet-geauthenticeerde aanvallers in staat om ongeautoriseerde toegang te verkrijgen, of kunnen leiden tot een denial-of-service via HTTP.

Oplossingen
Oracle heeft updates uitgebracht voor Enterprise Manager Base Platform om deze kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 3

  • Critical 9.1
    CVE-2026-34279

    Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Man…

    Oracle Oracle Enterprise Manager Base Platform
  • High 8.4
    CVE-2024-56406

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine
  • Medium 6.3
    CVE-2025-68161

    Apache Log4j Core: Missing TLS hostname verification in Socket appender

    The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-att…

    Apache Software Foundation Apache Log4j Core airflow-3 celeborn-0.6 Debian Ubuntu Wolfi Maven

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://www.oracle.com/security-alerts/cpuapr2026.html