CyberRota Analysis
AI-GeneratedThe vulnerability affects Oracle Enterprise Manager Base Platform versions 13.5 and 24.1, allowing unauthenticated attackers with network access via HTTPS to gain unauthorized read access to sensitive data. This medium-severity flaw poses a confidentiality risk, making it crucial for organizations using the affected versions to prioritize patching or mitigating this vulnerability to protect their data integrity. Security teams and system administrators managing Oracle Enterprise Manager should take immediate action to address this issue.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Related CVEs
Other vulnerabilities affecting the same vendor(s)