Vulnerability in Oracle Audit Vault
CVE-2010-4449
Unspecified vulnerability in the Audit Vault component in Oracle Audit Vault 10.2.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this issue is related to a crafted parameter in an action.execute request to the av component on TCP port 5700.
EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.
Affected products
- Oracle Audit_vault — versions 10.2.3.2
- N/a — versions n/a
References
- secalert_us@oracle.com (vdb-entry, x_refsource_XF)
- secalert_us@oracle.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)
- secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (x_refsource_MISC)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)