enterprise manager vulnerabilities and fixes

Recent CVEs affecting enterprise manager, with upgrade or downgrade steps. 36 tracked.

Also searched as: enterprisemanager.

enterprise manager has 36 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 9. Most recent: 2022-05-11. Highest priority: CVE-2022-29596 (score 65/100).

• CVE-2022-29596 CRITICAL 9.8 DOWNGRADE MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then ente
• CVE-2021-2134 MEDIUM 6.5 DOWNGRADE Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component:
• CVE-2021-2008 HIGH 7.3 DOWNGRADE Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component:
• CVE-2020-2641 MEDIUM 6.0 DOWNGRADE Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: D
• CVE-2020-2640 MEDIUM 6.0 DOWNGRADE Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: T
• CVE-2020-2638 MEDIUM 6.0 DOWNGRADE Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: E
• CVE-2020-2637 MEDIUM 6.0 DOWNGRADE Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: C
• CVE-2020-21993 MEDIUM 6.1 DOWNGRADE In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized b
• CVE-2019-6665 CRITICAL 9.4 UPGRADE UPGRADE On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0,
• CVE-2019-2895 HIGH 7.5 DOWNGRADE Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata P
• CVE-2018-5540 MEDIUM 4.4 UPGRADE UPGRADE On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-
• CVE-2018-10587 HIGH 7.2 UPGRADE NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57
• CVE-2018-10586 MEDIUM 4.8 UPGRADE NetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities in v
• CVE-2017-17407 CRITICAL 9.8 DOWNGRADE This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Sy
• CVE-2017-17406 CRITICAL 9.8 UPGRADE This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain En
• CVE-2017-16610 CRITICAL 9.8 UPGRADE This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain En
• CVE-2017-16609 HIGH 7.5 UPGRADE This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ne
• CVE-2017-16608 CRITICAL 9.8 UPGRADE This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain En
• CVE-2017-16607 HIGH 7.5 UPGRADE This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ne
• CVE-2017-16606 HIGH 8.8 DOWNGRADE This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installat
• CVE-2017-16605 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain
• CVE-2017-16604 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain
• CVE-2017-16603 HIGH 8.8 DOWNGRADE This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installat
• CVE-2017-16602 HIGH 8.8 DOWNGRADE This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Sy
• CVE-2017-16601 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain
• CVE-2017-16600 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems E
• CVE-2017-16599 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Sy
• CVE-2017-16598 HIGH 8.8 DOWNGRADE This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable instal
• CVE-2017-16597 CRITICAL 9.8 DOWNGRADE This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Sy
• CVE-2017-16596 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ne
• CVE-2017-16595 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ne
• CVE-2017-16594 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Sy
• CVE-2017-16593 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Sy
• CVE-2017-16592 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ne
• CVE-2017-16591 MEDIUM 6.5 DOWNGRADE This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Ne
• CVE-2017-16590 HIGH 8.8 DOWNGRADE This vulnerability allows remote attackers to bypass authentication on vulnerable installations of NetGain Sys

FAQ

How do I fix enterprise manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise manager being exploited right now?

None of the tracked enterprise manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise manager CVE should I patch first?

CVE-2022-29596 currently ranks highest (65/100): MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then ente.

RSS feed for enterprise manager · ← Back to latest CVEs