CVE-2020-2961

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework (Oracle OHS)). Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in takeover of Enterprise Manager Base Platform. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpuapr2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpuapr2020.htmlPatch, Vendor Advisory

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29603In manage_proj_edit_page.php in MantisBT before 2.24.4, any …4.3
• CVE-2020-29604An issue was discovered in MantisBT before 2.24.4. A missing…6.5
• CVE-2020-29605An issue was discovered in MantisBT before 2.24.4. Due to in…4.3
• CVE-2020-29606Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-29607A file upload restriction bypass vulnerability in Pluck CMS …7.2
• CVE-2020-29608An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2020-29610An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2020-29611An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-29612An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-29613A logic issue was addressed with improved state management. …5.5
• CVE-2020-29614This issue was addressed with improved checks. This issue is…7.8
• CVE-2020-29615An out-of-bounds read was addressed with improved input vali…5.5