CVE-2026-47006: High severity Oracle Oracle Enterprise Manager Base Platform vulnerability
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Self Update Framework). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Enterprise Manager Base Platform (Self Update Framework)to a version that resolves this vulnerability.Fixed in 13.5 - Upgrade
Upgrade
Oracle Enterprise Manager Base Platform (Self Update Framework)to a version that resolves this vulnerability.Fixed in 24.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47006?
The severity of CVE-2026-47006 is rated high with a score of 7.2.
How do I fix CVE-2026-47006?
To fix CVE-2026-47006, users should update their Oracle Enterprise Manager Base Platform to the latest version provided by Oracle.
What is the risk associated with CVE-2026-47006?
CVE-2026-47006 poses a risk score of 66, indicating a significant potential for exploitation.
Which versions of Oracle Enterprise Manager are affected by CVE-2026-47006?
Affected versions include Oracle Enterprise Manager Base Platform 13.5 and 24.1.
Who can exploit the CVE-2026-47006 vulnerability?
CVE-2026-47006 can be exploited by high privileged attackers with network access via HTTPS.