CVE-2012-0528 - Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Serve

CVE-2012-0528

Summary

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7, and Oracle Enterprise Manager Grid Control, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security Framework.

References

Vulnerable Configurations

cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_grid_control:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_grid_control:*:*:*:*:*:*:*:*

CVSS

Base:	5.8 (as of 11-10-2013 - 03:40)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:N

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
mandriva	MDVSA-2013:150
sectrack	1026929

Last major update

11-10-2013 - 03:40

Published

03-05-2012 - 17:55

Last modified

11-10-2013 - 03:40