Vulnerability in Oracle Database Server
CVE-2011-0848
Unspecified vulnerability in the Security Framework component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to User Model.
EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.
Affected products
- Oracle Database_server — versions 10.1.0.5, 10.2.0.3, 10.2.0.4
- Oracle Enterprise_manager_grid_control — versions 10.1.0.6, 10.2.0.5
- N/a — versions n/a
References
- secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)