CVE-2026-101524

The record

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Oracle Enterprise Manager Base Platform accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

Affected packages

Related vulnerabilities

• CVE-2026-63341 Aedes is an MQTT broker that can run on any stream server. CWE-400
• CVE-2026-62300 Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP… CWE-400
• CVE-2026-62254 LibreDWG is a free C library to read and write DWG files. CWE-400
• CVE-2026-62250 LibreDWG is a free C library to read and write DWG files. CWE-400
• CVE-2026-62303 Pistache is a high-performance REST toolkit written in C++. CWE-400
• CVE-2026-62160 Daptin is a GraphQL/JSON-API headless CMS. CWE-400
• CVE-2026-61848 Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3… CWE-400
• CVE-2026-61854 VoiceSentinel is a real-time voice moderation system for Minecraft servers. CWE-400