CVE-2020-2641

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework). Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise Manager for Oracle Database. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager for Oracle Database accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager for Oracle Database accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Oracle Database. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26404Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-26405Path traversal vulnerability in package upload functionality…7.1
• CVE-2020-26406Certain SAST CiConfiguration information could be viewed by …5.3
• CVE-2020-26407A XSS vulnerability exists in Gitlab CE/EE from 12.4 before …5.4
• CVE-2020-26408A limited information disclosure vulnerability exists in Git…5.3
• CVE-2020-26409A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>…6.5
• CVE-2020-26411A potential DOS vulnerability was discovered in all versions…4.3
• CVE-2020-26412Removed group members were able to use the To-Do functionali…4.3
• CVE-2020-26413An issue has been discovered in GitLab CE/EE affecting all v…5.3
• CVE-2020-26414An issue has been discovered in GitLab affecting all version…6.5
• CVE-2020-26415Information about the starred projects for private user prof…4.3
• CVE-2020-26416Information disclosure in Advanced Search component of GitLa…4.4