CVE-2026-61298: enterprise manager base platform 13.5.0.0, 24.1.0.0.0; +1 more affected products

CVE-2026-61298. CVSS 3.1 base score 5.6 (MEDIUM, Vendor/CNA). EPSS 0.00125 (percentile 0.02013), scored 21-Oct-2026.

Affected technology

enterprise manager base platform · 13.5.0.0
oracle

enterprise manager base platform · 24.1.0.0.0
oracle

Oracle Enterprise Manager Base Platform · 13.5, 24.1
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Low privileged attacker with logon can the infrastructure where Oracle Enterprise Manager Base Platform executes to compromise Oracle Enterprise Manager Base Platform. Vendor/CNA’s CVSS 3.1 assessment (base score 5.6/10) rates confidentiality impact as high; integrity and availability impact as none.

Published 22-Oct-2026 20:55 UTC

CWE: CWE-284
CCR priority: 22.4 /100 (P4)
CVSS 3.1: 5.6 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N · Vendor/CNA
EPSS: 0.00125 · percentile 0.02013 · 2026-10-21
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-22 20:50:20.011821+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-61298.html