How severe is CVE-2026-70684?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Oracle Corporation Enterprise Manager Base Platform

CVE-2026-70684

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Oracle Corporation Enterprise Manager Base Platform — versions 13.5, 24.1

References

secalert_us@oracle.com (vendor-advisory)

Frequently asked questions

What is CVE-2026-70684?: CVE-2026-70684 is a high-severity vulnerability in Oracle Corporation Enterprise Manager Base Platform. CVSS score: 8.1/10. Published 2026-08-18.
How severe is CVE-2026-70684?: High severity. CVSS v3 base score is 8.1 out of 10.