Lucene search

PRIOn knowledge basePRION:CVE-2016-0449

HistoryJan 21, 2016 - 2:59 a.m.

Code injection

2016-01-2102:59:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

7.9%

JSON

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0447.

CPENameOperatorVersion
enterprise_manager_grid_controleq11.2.0.4
enterprise_manager_grid_controleq11.1.0.1
enterprise_manager_grid_controleq12.1.0.4
enterprise_manager_grid_controleq12.1.0.5

Name	Operator	Version
enterprise_manager_grid_control	eq	11.2.0.4
enterprise_manager_grid_control	eq	11.1.0.1
enterprise_manager_grid_control	eq	12.1.0.4
enterprise_manager_grid_control	eq	12.1.0.5

References

www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

www.securitytracker.com/id/1034734

5.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

7.9%

JSON

Related for PRION:CVE-2016-0449