Technology · Oracle
Oracle Enterprise Manager Base Platform vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 48 vulnerabilities in Oracle Enterprise Manager Base Platform: 0 in the last 7 days and 10 in the last 90 days, 12 of them critical and 0 exploited in the wild. The most recent, CVE-2026-101527, was published on 20 October 2026. 4 vulnerabilities in the last four weeks, up 300% on the four before (1).
- Last 7 days
- 0
- Last 90 days
- 10
- Critical, all time
- 12
- Exploited in the wild
- 0
About Oracle Enterprise Manager Base Platform
A management platform for monitoring and administering Oracle software and hardware environments.
Latest Oracle Enterprise Manager Base Platform vulnerabilities
- CVE-2026-101527: Oracle Enterprise Manager Base Platform privilege escalation in InstallhighCVSS 7.8
- CVE-2026-101524: Oracle Enterprise Manager Base Platform Security Framework unauthorized accessmediumCVSS 5.6
- CVE-2026-101518: Oracle Enterprise Manager Base Platform privilege escalation in Agent Next GenhighCVSS 8.8
- CVE-2026-101511: Oracle Enterprise Manager Base Platform metadata information disclosuremediumCVSS 4.3
- CVE-2026-62597: Oracle Enterprise Manager Base Platform integrity violation in Event ManagementmediumCVSS 6.5EPSS 0.3%
- CVE-2026-70684: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent…highCVSS 8.1EPSS 0.4%
- CVE-2026-61300: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent…highCVSS 7.8EPSS 0.2%
- CVE-2026-61298: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise…mediumCVSS 5.6EPSS 0.1%
- CVE-2026-61286: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event…highCVSS 8.6EPSS 0.4%
- CVE-2026-61284: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application…highCVSS 8.8EPSS 0.4%
- CVE-2026-47006: Oracle Enterprise Manager takeover in Self Update FrameworkhighCVSS 7.2
- CVE-2026-47005: Oracle Enterprise Manager Base Platform takeover in Self Update FrameworkhighCVSS 7.2
- CVE-2026-47004: Oracle Enterprise Manager Base Platform takeover in Self Update FrameworkhighCVSS 8.8
- CVE-2026-47003: Oracle Enterprise Manager Base Platform confidentiality breach in UI FrameworkmediumCVSS 5.9
- CVE-2026-47002: Oracle Enterprise Manager Base Platform UI Framework vulnerabilitymediumCVSS 6.1
- CVE-2026-47001: Oracle Enterprise Manager Base Platform data manipulation in Web Services FrameworkmediumCVSS 5.4
- CVE-2026-47000: Oracle Enterprise Manager Base Platform integrity vulnerability in Security FrameworklowCVSS 3.5
- CVE-2026-46999: Oracle Enterprise Manager Base Platform compromise in Discovery FrameworkhighCVSS 7
- CVE-2026-46998: Oracle Enterprise Manager Base Platform takeover in Metadata PluginhighCVSS 8.8
- CVE-2026-46997: Oracle Enterprise Manager integrity vulnerability in Metadata PluginmediumCVSS 6.5
- CVE-2026-46996: Oracle Enterprise Manager data manipulation in Metadata PluginhighCVSS 7.1
- CVE-2026-46995: Oracle Enterprise Manager Base Platform takeover in Metadata PluginhighCVSS 8.8
- CVE-2026-46994: Oracle Enterprise Manager Base Platform takeover in Agent Next GencriticalCVSS 9.8
- CVE-2026-46993: Oracle Enterprise Manager Base Platform data compromise in Agent Next GenhighCVSS 8.2
- CVE-2026-46992: Oracle Enterprise Manager Base Platform takeover in Enterprise Config ManagementhighCVSS 8.8
Most severe Oracle Enterprise Manager Base Platform vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-46855: Oracle Enterprise Manager Base Platform improper access control in Metadata PlugincriticalCVSS 9.9EPSS 0.5%
- CVE-2026-46852: Oracle Enterprise Manager privilege escalation in Metadata PlugincriticalCVSS 9.9EPSS 0.5%
- CVE-2026-46854: Oracle Enterprise Manager Base Platform access control bypass in Target ManagementcriticalCVSS 9.9EPSS 0.4%
- CVE-2026-46832: Oracle Enterprise Manager Base Platform compromise in Discovery FrameworkcriticalCVSS 9.9EPSS 0.4%
- CVE-2026-46857: Oracle Enterprise Manager Base Platform improper access control in OMScriticalCVSS 9.8EPSS 0.5%
- CVE-2026-46994: Oracle Enterprise Manager Base Platform takeover in Agent Next GencriticalCVSS 9.8
- CVE-2026-46856: Oracle Enterprise Manager Base Platform vulnerability in Metadata PlugincriticalCVSS 9.6EPSS 0.4%
- CVE-2026-46853: Oracle Enterprise Manager Base Platform XSS in Metadata PlugincriticalCVSS 9.6EPSS 0.4%
- CVE-2026-46875: Oracle Enterprise Manager Base Platform takeover in Deployment LibrarycriticalCVSS 9.1EPSS 0.5%
- CVE-2026-34279: Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event…criticalCVSS 9.1EPSS 0.4%
Vulnerabilities per week
4 vulnerabilities in the last four weeks, up 300% on the four before (1). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 5 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 4 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Oracle Enterprise Manager Base Platform vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/enterprise-manager-base-platform)<a href="https://junglewise.ai/threats/technologies/enterprise-manager-base-platform"><img src="https://junglewise.ai/threats/technologies/enterprise-manager-base-platform/badge.svg" alt="Oracle Enterprise Manager Base Platform vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/enterprise-manager-base-platform.json, and this page as text at https://junglewise.ai/threats/technologies/enterprise-manager-base-platform.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Oracle Enterprise Manager Base Platform vulnerabilities", https://junglewise.ai/threats/technologies/enterprise-manager-base-platform, 9 November 2026.