The version of Oracle Enterprise Manager Ops Center installed on the remote host is affected by multiple vulnerabilities in Enterprise Manager Base Platform component:

  - An unspecified vulnerability in the Networking (Oracle     Security Service) component of Oracle Enterprise Manager     Ops Center. An easy to exploit vulnerability could allow     unauthenticated attacker with network access via HTTPS     to compromise Enterprise Manager Ops Center.
    A successful attack of this vulnerability can result in     takeover of Enterprise Manager Ops Center. (CVE-2018-11058)

  - An unspecified vulnerability in the Networking (RSA       Bsafe) component of Oracle Enterprise Manager Ops Center.
      A difficult to exploit vulnerability could allow a low       privileged attacker with logon to the infrastructure where       Enterprise Manager Ops Center executes to compromise       Enterprise Manager Ops Center. A successful attack of this       vulnerability can result in takeover of Enterprise Manager       Ops Center. (CVE-2019-1547)

  - An unspecified vulnerability in the Networking (cURL)     component of Oracle Enterprise Manager Ops Center.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Enterprise Manager Ops Center. A successful     attack of this vulnerability can result in takeover of     Enterprise Manager Ops Center. (CVE-2019-5482)

Detections

Analytics

Oracle Enterprise Manager Ops Center (Jan 2020 CPU)

critical Nessus Plugin ID 133091

Version 1.6