CVE-2026-47000 in Enterprise Manager Base Platform
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). The supported version that is affected is 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 3.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability exists within Oracle Enterprise Manager Base Platform's Security Framework component in version 24.1, representing a significant security concern for organizations relying on this enterprise management solution. The flaw manifests as an easily exploitable weakness that can be leveraged by low-privileged attackers who gain network access through HTTPS connections to compromise the platform. The vulnerability requires human interaction from users other than the attacker, suggesting that social engineering or user manipulation may be necessary components of the attack vector. The CVSS 3.1 base score of 3.5 indicates a moderate severity level with specific integrity impacts, though the overall risk remains considerable given the potential for unauthorized data modifications within the platform.
The technical nature of this vulnerability stems from weaknesses in the Security Framework component that governs authentication and authorization processes within Oracle Enterprise Manager Base Platform. Attackers with low privileges can exploit this flaw to gain unauthorized update, insert, or delete access to sensitive data within the platform's accessible database. The attack vector requires network connectivity via HTTPS, indicating that the vulnerability is not limited to internal networks but can be exploited from external positions. The CVSS vector (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) reveals that the attack requires network access with low complexity, low privilege requirements, and user interaction as a prerequisite, while the scope remains unchanging and the confidentiality impact is rated as none, though integrity impact is rated as low. This suggests attackers can modify existing data but cannot necessarily read sensitive information or cause complete system compromise.
The operational impact of this vulnerability extends beyond simple data modification capabilities, potentially affecting the integrity of critical enterprise management data that organizations rely upon for operational decision-making and system monitoring. Organizations using Oracle Enterprise Manager Base Platform may face risks including unauthorized configuration changes, corrupted management data, or manipulation of monitored system information that could lead to incorrect operational responses. The requirement for human interaction indicates that successful exploitation likely involves social engineering tactics such as phishing attacks or deceptive user prompts that trick legitimate users into performing actions that facilitate the attack. This makes the vulnerability particularly dangerous as it combines technical exploitation with human factors, potentially leading to more widespread compromise than purely technical vulnerabilities.
Organizations should implement immediate mitigations including enhanced monitoring of user activities within Oracle Enterprise Manager Base Platform, particularly around data modification operations and access patterns that could indicate exploitation attempts. Network segmentation and additional authentication controls should be implemented to reduce the attack surface and limit the potential impact of successful exploitation. Regular patching and updates of Oracle Enterprise Manager Base Platform installations should be prioritized to address this vulnerability, with particular attention to version 24.1 which is explicitly mentioned as affected. The organization should also consider implementing user behavior analytics to detect anomalous activities that might indicate exploitation attempts. Additionally, security awareness training programs should be enhanced to help users recognize and report suspicious activities that could facilitate this type of attack. The vulnerability aligns with CWE-287 (Improper Authentication) and may map to ATT&CK techniques involving privilege escalation and credential access. Organizations should also review their incident response procedures to ensure readiness for potential exploitation attempts targeting this specific vulnerability within their enterprise management infrastructure.