High WID-SEC-2026-2890 9 CVEs

Oracle Enterprise Manager: Mehrere Schwachstellen

Published Aug 18, 2026 · Updated Aug 18, 2026 · de-DE

Vendor: Oracle Product: Enterprise Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Enterprise Manager ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Enterprise Manager (OEM) ist ein Set von System Management Werkzeugen von Oracle für Oracle Umgebungen. Es beinhaltet Werkzeuge zum Monitoring von Oracle Umgebung und zur Automatisierung von Datenbank- und Applikations Administration.

Vulnerabilities 9

High 8.8

CVE-2026-61284

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Applicati…

Oracle Oracle Enterprise Manager Base Platform

Aug 18, 2026
High 8.8

CVE-2026-70737

Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (compone…

Oracle Oracle Enterprise Manager for Systems Infrastructure

Aug 18, 2026
High 8.6

CVE-2026-61286

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Man…

Oracle Oracle Enterprise Manager Base Platform

Aug 18, 2026
High 8.1

CVE-2026-70684

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Aug 18, 2026
High 7.8

CVE-2026-60822

Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (compone…

Oracle Oracle Enterprise Manager for Systems Infrastructure

Aug 18, 2026
High 7.8

CVE-2026-61300

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Aug 18, 2026
High 7.4

CVE-2026-2332 Public exploit

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://w4ke.info/2025/10/29/funky-chunks-2.htm…

Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven

Apr 14, 2026
Medium 6.3

CVE-2026-34481

Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinit…

Apache Software Foundation Apache Log4j JSON Template Layout spark-4.0-scala-2.13 spark-4.1-scala-2.13 Debian Ubuntu Wolfi Maven

Apr 10, 2026
Medium 5.6

CVE-2026-61298

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterpris…

Oracle Oracle Enterprise Manager Base Platform

Aug 18, 2026

Revision history

2026-08-18 #1
Initiale Fassung

References

Oracle Critical Security Patch Update Advisory - August 2026 - Appendix Oracle Enterprise Manager vom 2026-08-18
https://www.oracle.com/security-alerts/cspuaug2026.html#AppendixEM