VDB

OSA-39067740

OSA-39067740 PUBLISHED

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework (jackson-core)). The supported version that is affected is 13.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected Products

VendorProductVersions
OraclePrimavera P6 Enterprise Project Portfolio Management Version 21.12.0.0-21.12.21.6Primavera P6 Enterprise Project Portfolio Management Version 21.12.0.0-21.12.21.6
OraclePrimavera P6 Enterprise Project Portfolio Management Version 24.12.0.0-24.12.13.0Primavera P6 Enterprise Project Portfolio Management Version 24.12.0.0-24.12.13.0
OraclePrimavera P6 Enterprise Project Portfolio Management Version 23.12.0.0-23.12.18.0Primavera P6 Enterprise Project Portfolio Management Version 23.12.0.0-23.12.18.0
OracleOracle Enterprise Manager Base Platform Version 13.5Oracle Enterprise Manager Base Platform Version 13.5
OraclePrimavera P6 Enterprise Project Portfolio Management Version 22.12.0.0-22.12.21.1Primavera P6 Enterprise Project Portfolio Management Version 22.12.0.0-22.12.21.1
OraclePrimavera P6 Enterprise Project Portfolio Management Version 25.12.0.0-25.12.2.0Primavera P6 Enterprise Project Portfolio Management Version 25.12.0.0-25.12.2.0
OracleOracle Business Process Management Suite Version 12.2.1.4.0Oracle Business Process Management Suite Version 12.2.1.4.0

Timeline

  • Apr 24, 2026 CVE Published

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›