Oracle Enterprise Manager For Oracle Database vulnerabilities

2 CVEs affecting Oracle Enterprise Manager For Oracle Database, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20227, published 2021-03-23.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5645, published 2017-04-17. Critical severity, CVSS 9.8. EPSS: 89.8% chance of exploitation in the next 30 days. In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,…
• CVE-2021-20227, published 2021-03-23. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service…