Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54637
HistoryJul 21, 2022 - 12:00 a.m.

Oracle Enterprise Manager Base Platform输入验证错误漏洞

2022-07-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Oracle Enterprise Manager Base Platform is a native management platform from Oracle Corporation. Oracle Enterprise Manager Base Platform (component: Enterprise Manager Install) versions 13.4.0.0 through 13.5.0.0 contain an input validation error vulnerability that could be exploited by an unauthenticated attacker could gain network access via HTTP, which could result in the update, insertion, or deletion of data accessible to Enterprise Manager Base Platform.

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Related for CNVD-2022-54637