Known vulnerabilities in Oracle Enterprise Manager for Fusion Middleware

Vendor: Oracle
Software: Oracle Enterprise Manager for Fusion Middleware
Software CPE: cpe:2.3::oracle:oracle_enterprise_manager_for_fusion_middleware:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Enterprise Manager for Fusion Middleware Oracle Enterprise Manager for Fusion Middleware is affected by 13 known vulnerabilities: 1 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98639 - Improper input validation
CVE-2024-21192		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015154
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 - 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 - 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU55804 - Uncontrolled Search Path Element
CVE-2021-36770		 CWE-427 Low
No
No
 - 12.08.2021 SB2021081204
SB2021081205
SB2021092202
and 13 more
#VU52526 - Improper input validation
CVE-2021-2008		 CWE-20 Medium
No
No
 - 25.04.2021 SB2021042516
#VU52527 - Improper input validation
CVE-2021-2134		 CWE-20 Medium
No
No
 - 25.04.2021 SB2021042516
#VU27043 - Improper input validation
CVE-2018-1000180		 CWE-20 Medium
No
No
 - 21.04.2020 SB2020042107
SB2018092415
SB2021042531
and 17 more
#VU24632 - Improper input validation
CVE-2020-2614		 CWE-20 Medium
No
No
 - 25.01.2020 SB2020011465
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more