Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-101511 EUVD-2026-105925GHSA-qvqj-72fg-qx44

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported v…

Published Oct 20, 2026 · Updated Nov 6, 2026 · Assigned by oracle

Description

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected products

VendorProductAffectedFixed
Oracle Oracle Enterprise Manager Base Platform 13.5, 24.1 —

Advisories 1

References