CVE-2026-62597

Received Received - Intake

Oracle Enterprise Manager Base Platform Data Integrity Flaw

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-62597

EUVD

EUVD-2026-79508

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	enterprise_manager_base_platform	13.5
oracle	enterprise_manager_base_platform	24.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability affects Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. It allows a low-privileged attacker with network access via SOAP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or all accessible data in Oracle Enterprise Manager Base Platform.

Impact Analysis

An attacker could gain unauthorized access to modify or delete sensitive data, potentially leading to data breaches, loss of integrity, or unauthorized changes to system configurations. This could disrupt operations and compromise the confidentiality and reliability of managed systems.

Compliance Impact

This vulnerability could lead to unauthorized data modifications or deletions, violating integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, loss of trust, and potential data protection violations due to compromised data integrity.

Mitigation Strategies

Apply the latest Oracle Enterprise Manager Base Platform patches from Oracle's Critical Security Patch Update Advisory. Monitor Oracle's security alerts for updates on CVE-2026-62597. Restrict network access to the SOAP interface to trusted sources only.

Hi! I’m here to help you understand CVE-2026-62597. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70