Remote Code Execution in Oracle Enterprise Manager Extensibility Framework
CVE-2020-2629
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 15 January 2020
What is CVE-2020-2629?
A vulnerability exists within the Extensibility Framework of Oracle's Enterprise Manager that allows an attacker with privileged access over the network to compromise the platform. This flaw can lead to unauthorized access to sensitive data, as well as potentially allowing the attacker to modify, insert, or delete critical information. Additionally, there is a risk of a partial denial of service, impacting the availability of the Enterprise Manager system. Organizations using affected versions should prioritize patching to mitigate these security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Enterprise Manager Base Platform 12.1.0.5
Enterprise Manager Base Platform 13.2.0.0
Enterprise Manager Base Platform 13.3.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved