{"id":"CVE-2026-101518","published":"2026-10-20T22:18:01.117","lastModified":"2026-10-21T14:29:49.513","description":"Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform.  Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A low-privileged attacker with network access via HTTP can exploit a vulnerability in Oracle Enterprise Manager Base Platform (versions 13.5 and 24.1) to achieve full system compromise due to insufficient input validation or access controls in the Agent Next Gen component.","exploitability":"Easily exploitable by a low-privileged attacker with network access via HTTP; no user interaction required.","blast_radius":"Successful exploitation leads to full compromise (CIA impact) of Oracle Enterprise Manager Base Platform, potentially enabling lateral movement, data theft, or infrastructure disruption across monitored systems.","remediation":"Upgrade to Oracle Enterprise Manager Base Platform version 13.5 Patch Set Update 13.5.0.24.1 or version 24.1 Patch Set Update 24.1.0.24.1 (or later), as specified in Oracle's Security Alert for CVE-2026-101518.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["em-base-platform","agent-next-gen","http-exposure","privilege-escalation","full-compromise"],"model":"garnet-coder","analyzedAt":"2026-10-26T09:04:11.512Z"}}