cnvd-2016-05321
Vulnerability from cnvd
Title
Oracle Enterprise Manager Grid Control Enterprise Manager for Fusion Middleware组件存在未明漏洞
Description
Oracle Enterprise Manager Grid Control是美国甲骨文（Oracle）公司的一套系统管理软件，它为Oracle IT架构提供中心化监视、生命周期管理等功能。Enterprise Manager for Fusion Middleware是其中的一个基于Web的用于集中管理Fusion Middleware的所有组件的应用程序组件。 Oracle Enterprise Manager Grid Control 11.1.1.7和11.1.1.9版本中的Enterprise Manager for Fusion Middleware组件中的SOA Topology Viewer子组件存在安全漏洞。远程攻击者可利用该漏洞读取数据，影响数据的保密性。
Severity
中
Patch Name
Oracle Enterprise Manager Grid Control Enterprise Manager for Fusion Middleware组件存在未明漏洞的补丁
Patch Description
Oracle Enterprise Manager Grid Control是美国甲骨文（Oracle）公司的一套系统管理软件，它为Oracle IT架构提供中心化监视、生命周期管理等功能。Enterprise Manager for Fusion Middleware是其中的一个基于Web的用于集中管理Fusion Middleware的所有组件的应用程序组件。 Oracle Enterprise Manager Grid Control 11.1.1.7和11.1.1.9版本中的Enterprise Manager for Fusion Middleware组件中的SOA Topology Viewer子组件存在安全漏洞。远程攻击者可利用该漏洞读取数据，影响数据的保密性。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Reference
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixDB
Impacted products
Name
['Oracle Enterprise Manager Grid Control 11.1.1.7', 'Oracle Enterprise Manager Grid Control 11.1.1.9']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-3496"
    }
  },
  "description": "Oracle Enterprise Manager Grid Control\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u7cfb\u7edf\u7ba1\u7406\u8f6f\u4ef6\uff0c\u5b83\u4e3aOracle IT\u67b6\u6784\u63d0\u4f9b\u4e2d\u5fc3\u5316\u76d1\u89c6\u3001\u751f\u547d\u5468\u671f\u7ba1\u7406\u7b49\u529f\u80fd\u3002Enterprise Manager for Fusion Middleware\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u57fa\u4e8eWeb\u7684\u7528\u4e8e\u96c6\u4e2d\u7ba1\u7406Fusion Middleware\u7684\u6240\u6709\u7ec4\u4ef6\u7684\u5e94\u7528\u7a0b\u5e8f\u7ec4\u4ef6\u3002\r\n\r\nOracle Enterprise Manager Grid Control 11.1.1.7\u548c11.1.1.9\u7248\u672c\u4e2d\u7684Enterprise Manager for Fusion Middleware\u7ec4\u4ef6\u4e2d\u7684SOA Topology Viewer\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bfb\u53d6\u6570\u636e\uff0c\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u3002",
  "discovererName": "Oracle",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-05321",
  "openTime": "2016-07-25",
  "patchDescription": "Oracle Enterprise Manager Grid Control\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u7cfb\u7edf\u7ba1\u7406\u8f6f\u4ef6\uff0c\u5b83\u4e3aOracle IT\u67b6\u6784\u63d0\u4f9b\u4e2d\u5fc3\u5316\u76d1\u89c6\u3001\u751f\u547d\u5468\u671f\u7ba1\u7406\u7b49\u529f\u80fd\u3002Enterprise Manager for Fusion Middleware\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u57fa\u4e8eWeb\u7684\u7528\u4e8e\u96c6\u4e2d\u7ba1\u7406Fusion Middleware\u7684\u6240\u6709\u7ec4\u4ef6\u7684\u5e94\u7528\u7a0b\u5e8f\u7ec4\u4ef6\u3002\r\n\r\nOracle Enterprise Manager Grid Control 11.1.1.7\u548c11.1.1.9\u7248\u672c\u4e2d\u7684Enterprise Manager for Fusion Middleware\u7ec4\u4ef6\u4e2d\u7684SOA Topology Viewer\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bfb\u53d6\u6570\u636e\uff0c\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Enterprise Manager Grid Control Enterprise Manager for Fusion Middleware\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Enterprise Manager Grid Control 11.1.1.7",
      "Oracle Enterprise Manager Grid Control 11.1.1.9"
    ]
  },
  "referenceLink": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixDB",
  "serverity": "\u4e2d",
  "submitTime": "2016-07-21",
  "title": "Oracle Enterprise Manager Grid Control Enterprise Manager for Fusion Middleware\u7ec4\u4ef6\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.