CVE-2026-60822

{
  "id": "CVE-2026-60822",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-18T21:16:44.397",
  "lastModified": "2026-10-22T21:09:59.367",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent).  Supported versions that are affected are 13.5 and  24.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Enterprise Manager for Systems Infrastructure executes to compromise Oracle Enterprise Manager for Systems Infrastructure.  Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager for Systems Infrastructure. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el producto Oracle Enterprise Manager for Systems Infrastructure de Oracle Enterprise Manager (componente: Agente). Las versiones compatibles que están afectadas son 13.5 y 24.1. Vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios con inicio de sesión en la infraestructura donde se ejecuta Oracle Enterprise Manager for Systems Infrastructure comprometer Oracle Enterprise Manager for Systems Infrastructure. Ataques exitosos de esta vulnerabilidad pueden resultar en la toma de control de Oracle Enterprise Manager for Systems Infrastructure. Puntuación base CVSS 3.1 de 7.8 (Impactos en Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Oracle Corporation",
          "product": "Oracle Enterprise Manager for Systems Infrastructure",
          "versions": [
            {
              "version": "13.5",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "24.1",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-21T14:26:42.584172Z",
          "id": "CVE-2026-60822",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:enterprise_manager_for_systems_infrastructure:13.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "46AAAA24-C781-480B-B9FD-42E643D9C2DF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:oracle:enterprise_manager_for_systems_infrastructure:24.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFEDD1FD-14DC-44BC-9242-B94A64B3E836"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.oracle.com/security-alerts/cspuaug2026.html",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}