Vulnerability in Oracle Database Server

CVE-2012-0525

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.

EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 11.1.0.7, 11.2.0.2, 11.2.0.3
Oracle Enterprise_manager_grid_control — versions 10.2.0.5, 11.1.0.1
N/a — versions n/a

References

secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA)