Vulnerability in Oracle Enterprise Manager

CVE-2013-3758

Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to Schema Management.

EPSS: 0.012 (66.5th percentile) — read the EPSS interpretation.

Affected products

Oracle Enterprise_manager — versions 10.2.0.5, 11.1.0.1
Oracle Enterprise_manager_database_control — versions 10.2.0.4, 10.2.0.5, 11.1.0.7
Oracle Enterprise_manager_plugin_for_database_control — versions 12.1.0.2, 12.1.0.3
N/a — versions n/a

References

secalert_us@oracle.com (vdb-entry, x_refsource_XF)
secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (x_refsource_CONFIRM)
secalert_us@oracle.com (vdb-entry, x_refsource_BID)