Enterprise Manager
Vendor:
First CVE: Aug 4, 2004 · Active for 21 years
33
Total CVEs
More Total CVEs than 96% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Enterprise Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 4, 2004
21 years ago
Most Recent CVE
Jan 16, 2024
923 days ago
CVE Severity & Scoring
Enterprise Manager33 CVEs
48%
42%
All CVEs352,727 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network9 (27.3%)
Unknown23 (69.7%)
Physical0 (0.0%)
Adjacent Network1 (3.0%)
Attack Complexity
Low9 (27.3%)
High1 (3.0%)
Unknown23 (69.7%)
User Interaction
None10 (30.3%)
Unknown23 (69.7%)
Required0 (0.0%)
Privileges Required
Low2 (6.1%)
High5 (15.2%)
None3 (9.1%)
Unknown23 (69.7%)
Top CVEs
Signals from CVEs in this product scope (33 CVEs).
33 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-1364HIGH Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory. | Aug 4, 2004 | 8.5 | 37 | NO | YES |
CVE-2004-1363CRITICAL Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check | Aug 4, 2004 | 9.8 | 33 | NO | NO |
CVE-2004-1371HIGH Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure. | Aug 4, 2004 | 9.0 | 32 | NO | NO |
CVE-2007-5531HIGH Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote att | Oct 17, 2007 | 10.0 | 28 | NO | NO |
CVE-2006-1885HIGH Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM0 | Apr 20, 2006 | 10.0 | 27 | NO | NO |
CVE-2006-3721HIGH Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 | Jul 21, 2006 | 10.0 | 26 | NO | NO |
CVE-2021-2008HIGH Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected are 11.1. | Apr 22, 2021 | 7.3 | 25 | NO | NO |
CVE-2018-11040HIGH Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON wi | Jun 25, 2018 | 7.5 | 25 | NO | NO |
CVE-2007-2129HIGH Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01. | Apr 18, 2007 | 10.0 | 25 | NO | NO |
CVE-2024-20916HIGH Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). The supported version that is affected is 13.5.0. | Jan 16, 2024 | 8.3 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (33 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
3.0% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (33 CVEs).
Media Mentions
Signals from CVEs in this product scope (33 CVEs).
Top CNAs Publishing CVEs For Enterprise Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.2.0.8 | 1 | 10.0 | 2.2% | 0 | 0 |
| 9.2.0.7 | 1 | 10.0 | 3.9% | 0 | 0 |
| 9.2.0.1 | 1 | 5.5 | 2.0% | 0 | 0 |
| 9.0.1.5 | 1 | 10.0 | 3.9% | 0 | 0 |
| 9.0.1.0 | 1 | 5.5 | 2.0% | 0 | 0 |
| 9.0.1 | 10 | 6.9 | 8.8% | 0 | 1 |
| 9 | 10 | 6.9 | 8.8% | 0 | 1 |
| 13.5.0.0 | 1 | 8.3 | 0.3% | 0 | 0 |
| 13.3.2.0.0 | 1 | 7.5 | 1.2% | 0 | 0 |
| 13.3.1.0.0 | 1 | 7.5 | 1.2% | 0 | 0 |
| 13.3.0.0 | 4 | 6.0 | 1.2% | 0 | 0 |
| 13.2.2.0.0 | 1 | 7.5 | 1.2% | 0 | 0 |
| 13.2.0.0 | 4 | 6.0 | 1.2% | 0 | 0 |
| 13.2 | 1 | 7.5 | 3.2% | 0 | 0 |
| 12.2.1.4 | 1 | 6.5 | 0.9% | 0 | 0 |
| 12.2.1.3 | 1 | 7.3 | 0.9% | 0 | 0 |
| 12.1.0.5.0 | 1 | 7.5 | 1.2% | 0 | 0 |
| 12.1.0.5 | 4 | 6.0 | 1.2% | 0 | 0 |
| 11.1.1.9 | 1 | 7.3 | 0.9% | 0 | 0 |
| 11.1.0.6 | 1 | 3.5 | 1.2% | 0 | 0 |