CVE-2026-47002

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1

Description A flaw in the UI Framework component allows an unauthenticated attacker with network access via HTTPS to compromise the system. Exploitation requires human interaction and can lead to unauthorized read, update, insert, or delete access to a subset of accessible data. The impact may extend beyond the base platform to affect additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.