Lucene search
Japan Vulnerability NotesJVN:26103805HistoryJul 22, 2013 - 12:00 a.m.
JVN#26103805: Oracle Enterprise Manager vulnerable to cross-site scripting
2013-07-2200:00:00
Japan Vulnerability Notes
jvn.jp
13
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Oracle Enterprise Manager provided by Oracle contains a cross-site scripting vulnerability.
Impact
An arbitrary script may be executed on the user’s web browser.
Solution
Apply an Update
Update to the latest version according to the information provided by the developer.
Products Affected
- Enterprise Manager Grid Control 10g Release 1, version 10.2.0.5
- Oracle Database 11g Release 1, version 11.1.0.7
Related
cvelist
cvelist
CVE-2013-3791
2013-07-17 10:00:00
prion
prion
Code injection
2013-07-17 13:41:00
cve
cve
CVE-2013-3791
2013-07-17 13:41:16
nvd
nvd
NVD:CVE-2013-3791
2013-07-17 13:41:16
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00
securityvulns
securityvulns
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for JVN:26103805