CVE-2021-2137 - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)

Back Back to CVE browser

HIGH

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework)

Published Oct 20, 2021

8.8

HIGH

CVSS 3.1

EPSS 1.09%

Description

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Enterprise Manager Base Platform. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products

Vendor Oracle Corporation Product Enterprise Manager Base Platform Default
n/a
- Version
  13.4.0.0
  Status
  affected
  Constraints
  -
- Version
  13.5.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Oracle Corporation

Enterprise Manager Base Platform

n/a

Version	Status	Constraints
13.4.0.0	affected	-
13.5.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-16596
Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-16596		Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html		x_refsource_MISCVendor Advisory