Vulnerability in Oracle Database Server

CVE-2011-2244

Unspecified vulnerability in the Security Framework component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality and integrity via unknown vectors related to Authentication.

EPSS: 0.019 (78.0th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.1.0.5, 10.2.0.3, 10.2.0.4
Oracle Enterprise_manager_grid_control — versions 10.1.0.6, 10.2.0.5, 11.1.0.1
N/a — versions n/a

References

secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)