CVE-2012-0525
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect…
Does this matter?
Lower severity and a low EPSS score (0.97%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.
- CVSS 2.0
- 4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
- EPSS
- 0.97% probability · 60th percentile
- CISA KEV
- Not listed
- Affected
- oracle/database server · oracle/enterprise manager grid control
- Source
- secalert_us@oracle.com
References
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.htmlVendor Advisory
- http://www.securitytracker.com/id?1026929
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.htmlVendor Advisory
- http://www.securitytracker.com/id?1026929
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.