Vulnerability in Oracle Enterprise Manager Base Platform Component: Event Management

CVE-2024-20916

Summary

A vulnerability exists within the Oracle Enterprise Manager Base Platform, specifically related to the Event Management component. This vulnerability affects version 13.5.0.0, enabling a high privileged attacker with access to the physical communication segment of the hardware to exploit the Oracle Enterprise Manager Base Platform. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as gaining unauthorized access to all data accessible by the Oracle Enterprise Manager Base Platform. Additionally, the attacker may cause a partial denial of service, impacting the system's functionality. Given the potential wide-reaching implications of this vulnerability, surrounding products may also face heightened risks.

References