CVE-2026-60822

HighCVSS 7.8

Published: 18/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Vulnerability in Oracle Enterprise Manager for Systems Infrastructure (component: Agent). Affects versions 13.5 and 24.1. Easily exploitable, allows low-privileged attacker with local access to take over the system.

Risk Assessment

An attacker with local access and low privileges can gain full control of Enterprise Manager, potentially compromising managed infrastructure security.

Recommendation

Apply Oracle patches for versions 13.5 and 24.1. Restrict local access to systems running the Agent.

Original NVD description (English source)

Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager for Systems Infrastructure executes to compromise Oracle Enterprise Manager for Systems Infrastructure. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager for Systems Infrastructure. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).