Lucene search

[email protected]CVE-2013-0352

HistoryJan 17, 2013 - 1:55 a.m.

CVE-2013-0352

2013-01-1701:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2013-0352

oracle

enterprise manager

grid control

em base platform

db control

content management

security vulnerability

5.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

75.0%

JSON

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Content Management.

CPENameOperatorVersion
oracle:enterprise_manager_database_controloracle enterprise manager database controleq10.2.0.5
oracle:enterprise_manager_plugin_for_database_controloracle enterprise manager plugin for database controleq12.1.0.1
oracle:enterprise_manager_database_controloracle enterprise manager database controleq11.1.0.7
oracle:enterprise_manager_database_controloracle enterprise manager database controleq11.2.0.2
oracle:enterprise_manager_database_controloracle enterprise manager database controleq10.2.0.4
oracle:enterprise_manager_grid_controloracle enterprise manager grid controleq11.1.0.1
oracle:enterprise_manager_database_controloracle enterprise manager database controleq10.2.0.3
oracle:enterprise_manager_grid_controloracle enterprise manager grid controleq10.2.0.5
oracle:enterprise_manager_plugin_for_database_controloracle enterprise manager plugin for database controleq12.1.0.2
oracle:enterprise_manager_database_controloracle enterprise manager database controleq11.2.0.3

CPE	Name	Operator	Version
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	10.2.0.5
oracle:enterprise_manager_plugin_for_database_control	oracle enterprise manager plugin for database control	eq	12.1.0.1
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	11.1.0.7
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	11.2.0.2
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	10.2.0.4
oracle:enterprise_manager_grid_control	oracle enterprise manager grid control	eq	11.1.0.1
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	10.2.0.3
oracle:enterprise_manager_grid_control	oracle enterprise manager grid control	eq	10.2.0.5
oracle:enterprise_manager_plugin_for_database_control	oracle enterprise manager plugin for database control	eq	12.1.0.2
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	11.2.0.3

References

marc.info/?l=bugtraq&m=139344343412337&w=2

secunia.com/advisories/57126

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html

www.securityfocus.com/bid/57365

5.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for CVE-2013-0352

securityvulns2 prion1 nessus1 oracle1