https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-29596.htmlhttps://patchthecve.com/cve/CVE-2022-29596.htmlWed, 17 Jun 2026 04:40:28 +0000CRITICAL 9.8: MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../windows/win.ini%00.jpg&Pwd=_any_password_&ConnMode=1&3054=Login substring for directory traversal.https://patchthecve.com/cve/CVE-2020-21993.htmlhttps://patchthecve.com/cve/CVE-2020-21993.htmlWed, 17 Jun 2026 03:04:01 +0000MEDIUM 6.1: In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site.https://patchthecve.com/cve/CVE-2021-2134.htmlhttps://patchthecve.com/cve/CVE-2021-2134.htmlWed, 17 Jun 2026 03:48:53 +0000MEDIUM 6.5: Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected is 12.2.1.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprishttps://patchthecve.com/cve/CVE-2021-2008.htmlhttps://patchthecve.com/cve/CVE-2021-2008.htmlWed, 17 Jun 2026 03:48:36 +0000HIGH 7.3: Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprohttps://patchthecve.com/cve/CVE-2020-2641.htmlhttps://patchthecve.com/cve/CVE-2020-2641.htmlWed, 17 Jun 2026 03:12:33 +0000MEDIUM 6.0: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP thttps://patchthecve.com/cve/CVE-2020-2640.htmlhttps://patchthecve.com/cve/CVE-2020-2640.htmlWed, 17 Jun 2026 03:12:33 +0000MEDIUM 6.0: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to https://patchthecve.com/cve/CVE-2020-2638.htmlhttps://patchthecve.com/cve/CVE-2020-2638.htmlWed, 17 Jun 2026 03:12:33 +0000MEDIUM 6.0: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access vhttps://patchthecve.com/cve/CVE-2020-2637.htmlhttps://patchthecve.com/cve/CVE-2020-2637.htmlWed, 17 Jun 2026 03:12:32 +0000MEDIUM 6.0: Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access viahttps://patchthecve.com/cve/CVE-2019-6665.htmlhttps://patchthecve.com/cve/CVE-2019-6665.htmlWed, 17 Jun 2026 02:39:27 +0000CRITICAL 9.4: On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflohttps://patchthecve.com/cve/CVE-2019-2895.htmlhttps://patchthecve.com/cve/CVE-2019-2895.htmlWed, 17 Jun 2026 02:34:47 +0000HIGH 7.5: Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins). Supported versions that are affected are 12.1.0.5.0, 13.2.2.0.0, 13.3.1.0.0 and 13.3.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with nethttps://patchthecve.com/cve/CVE-2018-10587.htmlhttps://patchthecve.com/cve/CVE-2018-10587.htmlWed, 17 Jun 2026 01:34:13 +0000HIGH 7.2: NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution.https://patchthecve.com/cve/CVE-2018-10586.htmlhttps://patchthecve.com/cve/CVE-2018-10586.htmlWed, 17 Jun 2026 01:34:13 +0000MEDIUM 4.8: NetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities in versions before 10.1.12.https://patchthecve.com/cve/CVE-2018-5540.htmlhttps://patchthecve.com/cve/CVE-2018-5540.htmlWed, 17 Jun 2026 02:00:29 +0000MEDIUM 4.4: On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up.https://patchthecve.com/cve/CVE-2017-17407.htmlhttps://patchthecve.com/cve/CVE-2017-17407.htmlWed, 17 Jun 2026 01:10:44 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the content parameter provided to https://patchthecve.com/cve/CVE-2017-17406.htmlhttps://patchthecve.com/cve/CVE-2017-17406.htmlWed, 17 Jun 2026 01:10:44 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry, which listens on TCP ports 1800 and 1850 by default. https://patchthecve.com/cve/CVE-2017-16610.htmlhttps://patchthecve.com/cve/CVE-2017-16610.htmlWed, 17 Jun 2026 01:09:33 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a https://patchthecve.com/cve/CVE-2017-16609.htmlhttps://patchthecve.com/cve/CVE-2017-16609.htmlWed, 17 Jun 2026 01:09:33 +0000HIGH 7.5: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation of https://patchthecve.com/cve/CVE-2017-16608.htmlhttps://patchthecve.com/cve/CVE-2017-16608.htmlWed, 17 Jun 2026 01:09:33 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper validation of a user-supplhttps://patchthecve.com/cve/CVE-2017-16607.htmlhttps://patchthecve.com/cve/CVE-2017-16607.htmlWed, 17 Jun 2026 01:09:33 +0000HIGH 7.5: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation ofhttps://patchthecve.com/cve/CVE-2017-16606.htmlhttps://patchthecve.com/cve/CVE-2017-16606.htmlWed, 17 Jun 2026 01:09:33 +0000HIGH 8.8: This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The shttps://patchthecve.com/cve/CVE-2017-16605.htmlhttps://patchthecve.com/cve/CVE-2017-16605.htmlWed, 17 Jun 2026 01:09:33 +0000MEDIUM 6.5: This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exhttps://patchthecve.com/cve/CVE-2017-16604.htmlhttps://patchthecve.com/cve/CVE-2017-16604.htmlWed, 17 Jun 2026 01:09:33 +0000MEDIUM 6.5: This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exhttps://patchthecve.com/cve/CVE-2017-16603.htmlhttps://patchthecve.com/cve/CVE-2017-16603.htmlWed, 17 Jun 2026 01:09:33 +0000HIGH 8.8: This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The shttps://patchthecve.com/cve/CVE-2017-16602.htmlhttps://patchthecve.com/cve/CVE-2017-16602.htmlWed, 17 Jun 2026 01:09:32 +0000HIGH 8.8: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw existhttps://patchthecve.com/cve/CVE-2017-16601.htmlhttps://patchthecve.com/cve/CVE-2017-16601.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exhttps://patchthecve.com/cve/CVE-2017-16600.htmlhttps://patchthecve.com/cve/CVE-2017-16600.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists withihttps://patchthecve.com/cve/CVE-2017-16599.htmlhttps://patchthecve.com/cve/CVE-2017-16599.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw existhttps://patchthecve.com/cve/CVE-2017-16598.htmlhttps://patchthecve.com/cve/CVE-2017-16598.htmlWed, 17 Jun 2026 01:09:32 +0000HIGH 8.8: This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. Thhttps://patchthecve.com/cve/CVE-2017-16597.htmlhttps://patchthecve.com/cve/CVE-2017-16597.htmlWed, 17 Jun 2026 01:09:32 +0000CRITICAL 9.8: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of WRQ requests. When parsing the Fihttps://patchthecve.com/cve/CVE-2017-16596.htmlhttps://patchthecve.com/cve/CVE-2017-16596.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flhttps://patchthecve.com/cve/CVE-2017-16595.htmlhttps://patchthecve.com/cve/CVE-2017-16595.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flhttps://patchthecve.com/cve/CVE-2017-16594.htmlhttps://patchthecve.com/cve/CVE-2017-16594.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw existhttps://patchthecve.com/cve/CVE-2017-16593.htmlhttps://patchthecve.com/cve/CVE-2017-16593.htmlWed, 17 Jun 2026 01:09:32 +0000MEDIUM 6.5: This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw existhttps://patchthecve.com/cve/CVE-2017-16592.htmlhttps://patchthecve.com/cve/CVE-2017-16592.htmlWed, 17 Jun 2026 01:09:31 +0000MEDIUM 6.5: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flhttps://patchthecve.com/cve/CVE-2017-16591.htmlhttps://patchthecve.com/cve/CVE-2017-16591.htmlWed, 17 Jun 2026 01:09:31 +0000MEDIUM 6.5: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flhttps://patchthecve.com/cve/CVE-2017-16590.htmlhttps://patchthecve.com/cve/CVE-2017-16590.htmlWed, 17 Jun 2026 01:09:31 +0000HIGH 8.8: This vulnerability allows remote attackers to bypass authentication on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. User interaction is required to exploit this vulnerability. The specific flaw exists within the MainFilter servlet. The issue results from the lac