Lucene search

K
cve[email protected]CVE-2011-0870
HistoryJul 20, 2011 - 10:55 p.m.

CVE-2011-0870

2011-07-2022:55:01
web.nvd.nist.gov
73
cve-2011-0870
oracle
database
server
enterprise manager
vulnerability
confidentiality
integrity
availability
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.008

Percentile

81.4%

Unspecified vulnerability in the Schema Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected configurations

NVD
Node
oracledatabase_serverMatch10.1.0.5
OR
oracledatabase_serverMatch10.2.0.3
OR
oracledatabase_serverMatch10.2.0.4
OR
oracledatabase_serverMatch10.2.0.5
OR
oracledatabase_serverMatch11.1.0.7
OR
oracledatabase_serverMatch11.2.0.1
OR
oracledatabase_serverMatch11.2.0.2
Node
oracleenterprise_manager_grid_controlMatch10.1.0.6
OR
oracleenterprise_manager_grid_controlMatch10.2.0.5
VendorProductVersionCPE
oracledatabase_server11.2.0.1cpe:/a:oracle:database_server:11.2.0.1:::
oracledatabase_server10.2.0.3cpe:/a:oracle:database_server:10.2.0.3:::
oracledatabase_server11.2.0.2cpe:/a:oracle:database_server:11.2.0.2:::
oracledatabase_server11.1.0.7cpe:/a:oracle:database_server:11.1.0.7:::
oracledatabase_server10.2.0.4cpe:/a:oracle:database_server:10.2.0.4:::
oracledatabase_server10.1.0.5cpe:/a:oracle:database_server:10.1.0.5:::
oracledatabase_server10.2.0.5cpe:/a:oracle:database_server:10.2.0.5:::

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

High

EPSS

0.008

Percentile

81.4%