NCSC-2026-0202 [1.00] [M/H] Vulnerabilities fixed in Oracle Enterprise Manager
Oracle has fixed multiple vulnerabilities in Oracle Enterprise Manager versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 allow an attacker with low or no privileges and network access via HTTP or HTTPS to gain full control over the platform. Some vulnerabilities do not require authentication and can lead to unauthorized data modification, denial-of-service, or complete system compromise. Additionally, an attacker with SSH access can also achieve full system compromise. The vulnerabilities may also impact other Oracle products that are integrated with the platform. Furthermore, there is a vulnerability in Apache Log4j's JsonTemplateLayout up to version 2.25.3 that generates incorrect JSON output when serializing non-finite floating-point values, which can disrupt downstream log processing systems when MapMessages are logged.
CSIRTS triage
- What
- Vulnerabilities allow an attacker to gain full control over the platform, potentially without authentication.
- Who is affected
- Deployments of Oracle Enterprise Manager versions 13.5 and 24.1.
- Urgency
- Remediation is critical due to the risk of complete system compromise.
- Action
- Update to the latest versions of Oracle Enterprise Manager.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Oracle Enterprise Manager
Get an email when a new Oracle Enterprise Manager advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0202
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-344810.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all scored CVEs.
- Low exploitation riskCVE-2026-468320.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
- Low exploitation riskCVE-2026-468520.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all scored CVEs.
- Low exploitation riskCVE-2026-468530.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all scored CVEs.
- Low exploitation riskCVE-2026-468540.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
- Low exploitation riskCVE-2026-468550.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all scored CVEs.
- Low exploitation riskCVE-2026-468560.47% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all scored CVEs.
- Low exploitation riskCVE-2026-468570.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all scored CVEs.
- Low exploitation riskCVE-2026-468580.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all scored CVEs.
- Low exploitation riskCVE-2026-468640.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 35% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-34481 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46832 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46852 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46853 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46854 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46855 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46856 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46857 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46858 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46864 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46865 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46866 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46867 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46868 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46872 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-46875 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
More from NCSC-NL Advisories
- unknownNCSC-2026-0223 [1.00] [M/H] Vulnerabilities fixed in BeyondTrust Remote Support and Privileged Remote Access2026-07-10
- unknownNCSC-2026-0222 [1.00] [M/H] Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition2026-07-10
- unknownNCSC-2026-0221 [1.00] [M/H] Vulnerabilities fixed in UniFi products from Ubiquiti Networks2026-07-07
- unknownNCSC-2026-0220 [1.00] [M/H] Vulnerabilities fixed in Rancher by Rancher Labs2026-07-03
- unknownNCSC-2026-0219 [1.00] [M/H] Vulnerabilities fixed in GitHub Enterprise Server2026-07-03