High WID-SEC-2026-1943 16 CVEs

Oracle Enterprise Manager: Mehrere Schwachstellen

Published Jun 16, 2026 · Updated Jun 16, 2026 · de-DE

Vendor: Oracle Product: Enterprise Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Enterprise Manager ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Enterprise Manager (OEM) ist ein Set von System Management Werkzeugen von Oracle für Oracle Umgebungen. Es beinhaltet Werkzeuge zum Monitoring von Oracle Umgebung und zur Automatisierung von Datenbank- und Applikations Administration.

Vulnerabilities 16

Critical 9.9

CVE-2026-46832

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.9

CVE-2026-46852

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.9

CVE-2026-46854

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Target Ma…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.9

CVE-2026-46855

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.8

CVE-2026-46857

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Ma…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.6

CVE-2026-46853

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.6

CVE-2026-46856

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.1

CVE-2026-46858 Public exploit

Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JV…

Oracle APM - Application Performance Management

Jun 16, 2026
Critical 9.1

CVE-2026-46875

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Deploymen…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Critical 9.0

CVE-2026-46872

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Install).…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
High 8.8

CVE-2026-46864

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
High 8.2

CVE-2026-46865

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibi…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
High 8.2

CVE-2026-46866

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
High 7.2

CVE-2026-46867

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibi…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
High 7.2

CVE-2026-46868

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibi…

Oracle Oracle Enterprise Manager Base Platform

Jun 16, 2026
Medium 6.3

CVE-2026-34481

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinit…

Apache Software Foundation Apache Log4j JSON Template Layout spark-4.0-scala-2.13 spark-4.1-scala-2.13 Debian Ubuntu Wolfi Maven

Apr 10, 2026

Revision history

2026-06-16 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - June 2026 - Appendix Oracle Enterprise Manager vom 2026-06-16
https://www.oracle.com/security-alerts/cspujun2026.html#AppendixEM