CVE-2013-0372

2013-01-1701:55:04

[email protected]

web.nvd.nist.gov

cve-2013-0372

oracle

enterprise manager base platform

vulnerability

remote attackers

integrity

nvd

em db control

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.3%

JSON

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.

Affected configurations

NVD

Node

oracleenterprise_manager_database_controlMatch11.1.0.7

oracleenterprise_manager_database_controlMatch11.2.0.2

oracleenterprise_manager_database_controlMatch11.2.0.3

Node

oracleenterprise_manager_plugin_for_database_controlMatch12.1.0.2

Node

oracleenterprise_manager_grid_controlMatch11.1.0.1

oracleenterprise_manager_grid_controlMatch12.1.0.1

CPENameOperatorVersion
oracle:enterprise_manager_database_controloracle enterprise manager database controleq11.1.0.7
oracle:enterprise_manager_database_controloracle enterprise manager database controleq11.2.0.2
oracle:enterprise_manager_database_controloracle enterprise manager database controleq11.2.0.3

CPE	Name	Operator	Version
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	11.1.0.7
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	11.2.0.2
oracle:enterprise_manager_database_control	oracle enterprise manager database control	eq	11.2.0.3