Vulnerability in Oracle Enterprise Manager Database Control

CVE-2015-2647

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.

EPSS: 0.017 (75.9th percentile) — read the EPSS interpretation.

Affected products

Oracle Enterprise_manager_database_control — versions 11.1.0.7, 11.2.0.3, 11.2.0.4
Oracle Enterprise_manager_grid_control — versions 11.1.0.1
Oracle Enterprise_manager_plugin_for_database_control — versions 12.1.0.5, 12.1.0.6, 12.1.0.7
N/a — versions n/a

References

secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)