Michael Moskopp

**Name of the Vulnerable Software and Affected Versions** Oracle Enterprise Manager versions 13.4.0.0 and 13.5.0.0 **Description** The issue allows an unauthenticated attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, requiring human interaction from a person other than the attacker. Successful attacks may significantly impact additional products and can result in unauthorized update, insert, or delete access to some accessible data. **Recommendations** For versions 13.4.0.0 and 13.5.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.