High WID-SEC-2026-2446 27 CVEs

Oracle Enterprise Manager: Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Jul 21, 2026 · de-DE

Vendor: Oracle Product: Enterprise Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Enterprise Manager ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Enterprise Manager (OEM) ist ein Set von System Management Werkzeugen von Oracle für Oracle Umgebungen. Es beinhaltet Werkzeuge zum Monitoring von Oracle Umgebung und zur Automatisierung von Datenbank- und Applikations Administration.

Vulnerabilities 27

Critical 9.8

CVE-2020-9547 Public exploit Scanner template EPSS 18%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Critical 9.8

CVE-2026-46994

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Critical 9.1

CVE-2026-46989

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framew…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 8.8

CVE-2026-46992

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterpris…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 8.8

CVE-2026-46995

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 8.8

CVE-2026-46998

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 8.8

CVE-2026-47004

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Upda…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 8.2

CVE-2026-46993

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 8.1

CVE-2014-3643

jersey: XXE via parameter entities

jersey: XXE via parameter entities not disabled by the jersey SAX parser

jersey jersey com.sun.jersey:jersey-core Maven

Dec 15, 2019
High 7.7

CVE-2026-46987

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Applicati…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 7.3

CVE-2026-46990

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterpris…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 7.2

CVE-2026-46988

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 7.2

CVE-2026-47005

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Upda…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 7.2

CVE-2026-47006

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Upda…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 7.1

CVE-2026-46996

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
High 7.0

CVE-2026-46999

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 6.5

CVE-2026-46997

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 6.3

CVE-2025-68161

Apache Log4j Core: Missing TLS hostname verification in Socket appender

The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-att…

Apache Software Foundation Apache Log4j Core airflow-3 celeborn-0.6 Debian Ubuntu Wolfi Maven

Dec 18, 2025
Medium 6.3

CVE-2025-8916

Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpk…

Legion of the Bouncy Castle BC-JAVA BCPKIX-FIPS druid Debian Ubuntu Wolfi Maven

Aug 13, 2025
Medium 6.1

CVE-2026-47002

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framew…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 5.9

CVE-2026-47003

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framew…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 5.4

CVE-2026-47001

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Web Servi…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 5.3

CVE-2026-46984

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 5.3

CVE-2026-46985

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 5.3

CVE-2026-46986

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Medium 4.4

CVE-2026-46991

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterpris…

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026
Low 3.5

CVE-2026-47000

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security …

Oracle Oracle Enterprise Manager Base Platform

Jul 21, 2026

Revision history

2026-07-21 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - July 2026 - Appendix Oracle Enterprise Manager vom 2026-07-21
https://www.oracle.com/security-alerts/cpujul2026.html#AppendixEM