Vulnerability in Oracle Database Server

CVE-2012-0520

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related to Security Framework.

EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.2.0.3, 10.2.0.4, 10.2.0.5
Oracle Enterprise_manager_grid_control — versions 10.2.0.5, 11.1.0.1
N/a — versions n/a

References

secalert_us@oracle.com (vdb-entry, x_refsource_BID)
secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA)