The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system, related to errors in resource release, allow attackers to disclose protected information.

🗓️ 03 Feb 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Vulnerabilities in BSAFE Micro Edition and Oracle products enable disclosure of sensitive data via resource leakage.

Reporter	Title	Published	Views	Family All 12
CNVD	Dell EMC RSA BSAFE Micro Edition Suite Memory Misreference Vulnerability	4 Sep 201800:00	–	cnvd
CVE	CVE-2018-11055	31 Aug 201818:00	–	cve
Cvelist	CVE-2018-11055	31 Aug 201818:00	–	cvelist
EUVD	EUVD-2018-3099	7 Oct 202500:30	–	euvd
NVD	CVE-2018-11055	31 Aug 201818:29	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2020	14 Apr 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - January 2020	14 Jan 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - July 2019	16 Jul 201900:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - July 2020	14 Jul 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - October 2020	20 Oct 202000:00	–	oracle

Vulners

Node

oracle enterprise_manager_ops_centerMatch12.3.3

OR

oracle database_serverMatch11.2.0.4

OR

oracle database_serverMatch12.1.0.2

OR

oracle database_serverMatch12.2.0.1

OR

oracle database_serverMatch18c

OR

oracle database_serverMatch19c

OR

rsa_security_llc rsa_bsafe_micro_edition_suiteRange4.0.0–4.0.11

OR

oracle enterprise_manager_ops_centerMatch12.4.0

OR

oracle oracle_communications_ip_service_activatorMatch7.3.4

OR

oracle oracle_communications_ip_service_activatorMatch7.4.0

OR

oracle security_serviceMatch11.1.1.9.0

OR

oracle security_serviceMatch12.1.3.0.0

OR

oracle security_serviceMatch12.2.1.3.0

OR

rsa_security_llc rsa_bsafe_micro_edition_suiteRange4.1.0–4.1.6.1

Source	Link
oracle	www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html
oracle	www.oracle.com/security-alerts/cpujan2020.html
oracle	www.oracle.com/security-alerts/cpujul2019.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-11055
seclists	www.seclists.org/fulldisclosure/2018/Aug/46
web	www.web.nvd.nist.gov/view/vuln/detail

03 Feb 2020 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.9

CVSS 35.5

EPSS0.00426

BSAFE Micro Edition Oracle Security Service Oracle Database Server Oracle Communications Service Activator Enterprise Manager Ops Center