Vulnerabilities Fixed in Oracle Enterprise Manager (advisories.ncsc.nl)

• Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 affected
• Unauthorized access to sensitive data without or with low privileges
• Full system compromise possible for some vulnerabilities

"Oracle has fixed multiple vulnerabilities in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. Attackers can use network access via HTTPS/HTTP without authentication or with low privileges to perform unauthorized read, write, create, delete, and modify actions on sensitive data. Some vulnerabilities allow full system compromise. Affected components include Agent Next Gen, Metadata Plugin, and UI Framework."