Vulnerability in Oracle Database Server

CVE-2011-0852

Unspecified vulnerability in the Security Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, and 10.2.0.4; and Oracle Enterprise Manager Grid Control 10.1.0.6; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Audit Administration.

EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.1.0.5, 10.2.0.3, 10.2.0.4
Oracle Enterprise_manager_grid_control — versions 10.1.0.6
N/a — versions n/a

References

secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)