CVE-2026-47005: High severity Oracle Oracle Enterprise Manager Base Platform vulnerability
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Enterprise Manager Base Platform (Self Update Framework)to a version that resolves this vulnerability.Fixed in 13.5 - Upgrade
Upgrade
Oracle Enterprise Manager Base Platform (Self Update Framework)to a version that resolves this vulnerability.Fixed in 24.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47005?
The severity of CVE-2026-47005 is high with a score of 7.2.
How do I fix CVE-2026-47005?
To fix CVE-2026-47005, you should apply the latest security updates provided by Oracle for the affected versions.
What products are affected by CVE-2026-47005?
CVE-2026-47005 affects the Oracle Enterprise Manager Base Platform product versions 13.5 and 24.1.
Who can exploit CVE-2026-47005?
CVE-2026-47005 can be exploited by high privileged attackers with network access via HTTPS.
What is the impact of CVE-2026-47005?
CVE-2026-47005 allows attackers to potentially compromise the Oracle Enterprise Manager Base Platform.