CVE-2012-0525

2012-05-0317:55:01

[email protected]

web.nvd.nist.gov

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

AI Score

5.1

Confidence

Low

EPSS

0.001

Percentile

47.8%

JSON

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.

Affected configurations

Nvd

Node

oracledatabase_serverMatch11.1.0.7

oracledatabase_serverMatch11.2.0.2

oracledatabase_serverMatch11.2.0.3

Node

oracleenterprise_manager_grid_controlMatch10.2.0.5

oracleenterprise_manager_grid_controlMatch11.1.0.1

VendorProductVersionCPE
oracledatabase_server11.1.0.7cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
oracledatabase_server11.2.0.2cpe:2.3:a:oracle:database_server:11.2.0.2:*:*:*:*:*:*:*
oracledatabase_server11.2.0.3cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*
oracleenterprise_manager_grid_control10.2.0.5cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*
oracleenterprise_manager_grid_control11.1.0.1cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	database_server	11.1.0.7	cpe:2.3:a:oracle:database_server:11.1.0.7:::::::*
oracle	database_server	11.2.0.2	cpe:2.3:a:oracle:database_server:11.2.0.2:::::::*
oracle	database_server	11.2.0.3	cpe:2.3:a:oracle:database_server:11.2.0.3:::::::*
oracle	enterprise_manager_grid_control	10.2.0.5	cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:::::::*
oracle	enterprise_manager_grid_control	11.1.0.1	cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:::::::*