CVE-2015-2647

2015-07-1611:00:07

[email protected]

web.nvd.nist.gov

cve-2015-2647

enterprise manager

oracle database

oracle

vulnerability

confidentiality

integrity

nvd

content management

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

5.3

Confidence

Low

EPSS

0.001

Percentile

44.5%

JSON

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.

Affected configurations

NVD

Node

oracleenterprise_manager_plugin_for_database_controlMatch12.1.0.5

oracleenterprise_manager_plugin_for_database_controlMatch12.1.0.6

oracleenterprise_manager_plugin_for_database_controlMatch12.1.0.7

Node

oracleenterprise_manager_database_controlMatch11.1.0.7

oracleenterprise_manager_database_controlMatch11.2.0.3

oracleenterprise_manager_database_controlMatch11.2.0.4

Node

oracleenterprise_manager_grid_controlMatch11.1.0.1

VendorProductVersionCPE
oracleenterprise_manager_plugin_for_database_control12.1.0.5cpe:/a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.5:::
oracleenterprise_manager_plugin_for_database_control12.1.0.7cpe:/a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.7:::
oracleenterprise_manager_plugin_for_database_control12.1.0.6cpe:/a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.6:::

Vendor	Product	Version	CPE
oracle	enterprise_manager_plugin_for_database_control	12.1.0.5	cpe:/a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.5:::
oracle	enterprise_manager_plugin_for_database_control	12.1.0.7	cpe:/a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.7:::
oracle	enterprise_manager_plugin_for_database_control	12.1.0.6	cpe:/a:oracle:enterprise_manager_plugin_for_database_control:12.1.0.6:::