CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0440 Vulnerabilities fixed in Oracle Enterprise Manager

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10893

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0440 Vulnerabilities fixed in Oracle Enterprise Manager

Oracle released patches for multiple vulnerabilities affecting Enterprise Manager versions 13.5 and 24.1, impacting Base Platform, Data Guard Management, Siebel, and Virtualization components. The vulnerabilities enable unauthorized data access, data modification, system integrity compromise, and remote code execution (RCE), with some requiring only network access and no authentication.

Why it matters: Organizations running Oracle Enterprise Manager 13.5 or 24.1 must prioritize patching to prevent unauthenticated RCE and data breach exposure in critical infrastructure management systems.

VendorsOracle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary