CVE-2011-2248

2011-07-2023:55:01

oracle

web.nvd.nist.gov

cve-2011-2248

oracle

database server

enterprise manager grid control

vulnerability

remote attackers

confidentiality

integrity

availability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

71.6%

JSON

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, related to SQL Details UI & Explain Plan.

Affected configurations

Nvd

Node

oracledatabase_serverMatch11.1.0.7

oracledatabase_serverMatch11.2.0.1

oracledatabase_serverMatch11.2.0.2

Node

oracleenterprise_manager_grid_controlMatch10.1.0.6

oracleenterprise_manager_grid_controlMatch10.2.0.5

oracleenterprise_manager_grid_controlMatch11.1.0.1

VendorProductVersionCPE
oracledatabase_server11.1.0.7cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
oracledatabase_server11.2.0.1cpe:2.3:a:oracle:database_server:11.2.0.1:*:*:*:*:*:*:*
oracledatabase_server11.2.0.2cpe:2.3:a:oracle:database_server:11.2.0.2:*:*:*:*:*:*:*
oracleenterprise_manager_grid_control10.1.0.6cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.6:*:*:*:*:*:*:*
oracleenterprise_manager_grid_control10.2.0.5cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:*:*:*:*:*:*:*
oracleenterprise_manager_grid_control11.1.0.1cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	database_server	11.1.0.7	cpe:2.3:a:oracle:database_server:11.1.0.7:::::::*
oracle	database_server	11.2.0.1	cpe:2.3:a:oracle:database_server:11.2.0.1:::::::*
oracle	database_server	11.2.0.2	cpe:2.3:a:oracle:database_server:11.2.0.2:::::::*
oracle	enterprise_manager_grid_control	10.1.0.6	cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.6:::::::*
oracle	enterprise_manager_grid_control	10.2.0.5	cpe:2.3:a:oracle:enterprise_manager_grid_control:10.2.0.5:::::::*
oracle	enterprise_manager_grid_control	11.1.0.1	cpe:2.3:a:oracle:enterprise_manager_grid_control:11.1.0.1:::::::*