Solaris 10 (x86) : 123896-77

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network...

Solaris 10 (x86) : 123896-79

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network...

Solaris 10 (sparc) : 123893-77

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network...

CVE-2017-10091

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10091: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11089

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0, 13.1.0, and 13.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially impacting additional...

Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (July 2017 CPU) (httpoxy)

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Bouncy Castle Java library due to improper validation of a point within the elliptic curve. An...

PT-2017-15954

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0, 13.1.0, and 13.2.0 Description The issue allows an unauthenticated attacker with network access via HTTPS to compromise the Enterprise Manager Base Platform, resulting in the ability to...

CVE-2017-3518: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: Discovery Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access v...

PT-2017-15772

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2, 12.5.0.2, 12.5.0.3 Description The issue affects the Application Testing Suite component, specifically the Test Manager for Web Apps subcomponent. It allows an unauthenticated attacker...

CVE-2017-3311: Undefined Security Weakness

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

PT-2016-6579

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control version 12.1.0.5 Description The issue affects confidentiality and integrity, and it is related to the Security Framework component. Recommendations For Oracle Enterprise Manager Grid Control version...

CVE-2016-5604: Improper Access Control

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563...

CVE-2016-3494

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning...

PT-2016-5517

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 11.1.1.7 through 11.1.1.9 Description The issue affects confidentiality and is related to the SOA Topology Viewer in the Enterprise Manager for Fusion Middleware component. It allows remote...

CVE-2016-0635: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

CVE-2016-3540: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect confidentiality via vectors related to UI Framework...

PT-2016-5579

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control version 12.1.0.5 Description The issue affects confidentiality and integrity, and it is related to the Security Framework component. Recommendations For Oracle Enterprise Manager Grid Control version...

PT-2016-5559

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0.5 through 13.1.0.0 Description The issue affects confidentiality and is related to the UI Framework in the Enterprise Manager Base Platform component. Recommendations For versions 12.1.0.5...

CVE-2016-3563: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-5604...