Vulnerability in Oracle Database Server

CVE-2012-1737

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.1, and EM Plugin for DB 12.1.0.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Performance Advisories/UIs.

EPSS: 0.024 (82.1th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 11.1.0.7, 11.2.0.2, 11.2.0.3
Oracle Enterprise_manager_grid_control — versions 10.2.0.5, 11.1.0.1, 12.1.0.1
N/a — versions n/a

References

secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
secalert_us@oracle.com (vdb-entry, x_refsource_XF)
secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (vdb-entry, x_refsource_BID)
secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA)