Vulnerability in Oracle Enterprise Manager for Systems Infrastructure Affecting Oracle
CVE-2026-60822

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Enterprise Manager For Systems Infrastructure
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60822?

A vulnerability exists in Oracle Enterprise Manager for Systems Infrastructure that could allow a low privileged attacker with access to the infrastructure to exploit the system. This flaw enables the attacker to compromise the Oracle Enterprise Manager environment, leading to potential unauthorized access and control. Supported versions 13.5 and 24.1 are impacted, making it crucial for users to apply security measures and patches to mitigate risk.

Affected Version(s)

Oracle Enterprise Manager for Systems Infrastructure 13.5

Oracle Enterprise Manager for Systems Infrastructure 24.1

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.