High WID-SEC-2026-4087 11 CVEs

Oracle Enterprise Manager: Mehrere Schwachstellen

Published Oct 20, 2026 · Updated Oct 20, 2026 · de-DE

Vendor: Oracle Product: Enterprise Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Enterprise Manager ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Oracle Enterprise Manager (OEM) ist ein Set von System Management Werkzeugen von Oracle für Oracle Umgebungen. Es beinhaltet Werkzeuge zum Monitoring von Oracle Umgebung und zur Automatisierung von Datenbank- und Applikations Administration.

Vulnerabilities 11

Critical 9.9

CVE-2026-101528

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Dat…

Oracle Oracle Enterprise Manager for Oracle Database

Oct 20, 2026
Critical 9.9

CVE-2026-101529

Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Dat…

Oracle Oracle Enterprise Manager for Oracle Database

Oct 20, 2026
High 8.8

CVE-2025-48734 Public exploit

Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this…

Apache Software Foundation Apache Commons BeanUtils 1.x Apache Commons BeanUtils 2.x druid Debian Ubuntu Azure Linux Wolfi Maven

May 28, 2025
High 8.8

CVE-2026-101518

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Nex…

Oracle Oracle Enterprise Manager Base Platform

Oct 20, 2026
High 8.8

CVE-2026-101525

Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuratio…

Oracle Oracle Enterprise Manager for Siebel

Oct 20, 2026
High 8.8

CVE-2026-101526

Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuratio…

Oracle Oracle Enterprise Manager for Siebel

Oct 20, 2026
High 8.1

CVE-2026-54512 Public exploit

jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymor…

FasterXML jackson-databind druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jun 23, 2026
High 7.8

CVE-2026-101527

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterpris…

Oracle Oracle Enterprise Manager Base Platform

Oct 20, 2026
Medium 5.6

CVE-2026-101524

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security …

Oracle Oracle Enterprise Manager Base Platform

Oct 20, 2026
Medium 4.3

CVE-2026-101511

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata …

Oracle Oracle Enterprise Manager Base Platform

Oct 20, 2026
Low 1.8

CVE-2026-1225

Malicious logback.xml configuration file allows instantiation of arbitrary classes

ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration fi…

QOS.CH Sarl Logback-core trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven

Jan 22, 2026

Revision history

2026-10-20 #1
Initiale Fassung

References

Oracle Critical Patch Update Advisory - October 2026 - Appendix Oracle Enterprise Manager vom 2026-10-20
https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixEM