CVE-2010-2390

2010-10-1400:00:20

oracle

web.nvd.nist.gov

cve-2010-2390

database control

em console

oracle

fusion middleware

vulnerability

confidentiality

integrity

availability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.006

Percentile

78.6%

JSON

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected configurations

Nvd

Node

oracledatabase_serverMatch10.1.0.5

oracledatabase_serverMatch10.2.0.3

Node

oraclefusion_middlewareMatch10.1.2.3

oraclefusion_middlewareMatch10.1.4.3

Node

oracleenterprise_manager_grid_control

VendorProductVersionCPE
oracledatabase_server10.1.0.5cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
oracledatabase_server10.2.0.3cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*
oraclefusion_middleware10.1.2.3cpe:2.3:a:oracle:fusion_middleware:10.1.2.3:*:*:*:*:*:*:*
oraclefusion_middleware10.1.4.3cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:*:*:*:*:*:*:*
oracleenterprise_manager_grid_control*cpe:2.3:a:oracle:enterprise_manager_grid_control:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	database_server	10.1.0.5	cpe:2.3:a:oracle:database_server:10.1.0.5:::::::*
oracle	database_server	10.2.0.3	cpe:2.3:a:oracle:database_server:10.2.0.3:::::::*
oracle	fusion_middleware	10.1.2.3	cpe:2.3:a:oracle:fusion_middleware:10.1.2.3:::::::*
oracle	fusion_middleware	10.1.4.3	cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:::::::*
oracle	enterprise_manager_grid_control	*	cpe:2.3:a:oracle:enterprise_manager_grid_control::::::::