A vulnerability classified as very critical was found in Oracle Enterprise Manager Base Platform 13.2/13.3. Affected by this vulnerability is an unknown functionality of the component Jython. The manipulation leads to deserialization.

This vulnerability is known as CVE-2016-4000. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.