CVE-2013-3791

Unspecified vulnerability in Enterprise Manager EM Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

CVE-2013-3758

Unspecified vulnerability in the Enterprise Manager EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via...

CVE-2013-3758

Technical details about CVE-2013-3758 are not publicly available in the provided documents; monitor for updates from Oracle and security advisories.

CVE-2013-3791

Oracle Enterprise Manager Grid Control: CVE-2013-3791 corresponds to a cross‑site scripting vulnerability in the Oracle Enterprise Manager Grid Control/EM Base Platform 10.2.0.5 and EM DB Control 11.1.0.7, due to flaws in the UI Framework. Affected products include Enterprise Manager Grid Control...

Cross site scripting

Cross-site scripting XSS vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is...

TeamSHATTER Security Advisory: SQL Injection in Oracle EM (Resource Manager) (CVE-2013-0358)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Enterprise Manager Resource Manager February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3 Remot...

TeamSHATTER Security Advisory: SQL Injection in Oracle EM (dBClone) (CVE-2013-0374)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Enterprise Manager dBClone February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote...

TeamSHATTER Security Advisory: Oracle EM Cross Site Scripting in XDBResource cancelURL parameter (CVE-2013-0352)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory Oracle Enterprise Manager Cross Site Scripting in XDBResource cancelURL parameter February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10.2.0.3, 10.2.0.4; 10.2.0.5, 11.1.0.7,...

XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS

Hello 3APA3A! After my previous list of vulnerable software with ZeroClipboard.swf, here is a list of software with ZeroClipboard10.swf. These are Cross-Site Scripting vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS. Earlier I've wrote about Cross-Site Scripting...

CVE-2013-0372

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vecto...

CVE-2013-0374

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote...

CVE-2012-3219

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

CVE-2013-0352

Oracle CVE-2013-0352 describes a Cross‑Site Scripting vulnerability in Oracle Enterprise Manager components, specifically the EM Database Control/XML Database Resources page via the cancelURL parameter. An attacker could remotely exploit this to steal session cookies and impersonate a legitimate ...

CVE-2013-0355

The CVE-2013-0355 issue corresponds to a cross-site scripting vulnerability in Oracle Enterprise Manager components (EM Base Platform and EM DB Control) affecting versions 11.1.0.7, 11.2.0.2, and 11.2.0.3, related to the Distributed/Cross DB Features. The TeamSHATTER advisory documents a remote-e...

CVE-2013-0372

CVE-2013-0372 affects Oracle Enterprise Manager products (EM Base Platform/Grid Control and EM DB Control) with an SQL Injection vulnerability in the advReplicationAdmin path of the OEM web application, enabling remote attackers to execute SQL in the backend database. Affected versions include EM...

CVE-2013-0358

CVE-2013-0358 is supported by a TeamSHATTER advisory detailing a SQL Injection in Oracle Enterprise Manager (Resource Manager) affecting OEM Database Control 10.2.0.3/10.2.0.4/10.2.0.5, 11.1.0.7, 11.2.0.2/11.2.0.3 and EM Plugin for DB 12.1.0.1/12.1.0.2. The issue arises from vulnerable parameters...

CVE-2013-0354

CVE-2013-0354 affects Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 11.1.0.7, 11.2.0.2, 11.2.0.3. The TeamSHATTER advisory documents a HTTP Response Splitting vulnerability in policyViewSettings that is remotely exploitable; an attacker convincing a valid user...

CVE-2013-0374

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote...

CVE-2010-5102

TYPO3 4.2.x/4.3.x/4.4.x contain a directory traversal vulnerability in the unzip library (mod/tools/em/class.em_unzip.php) that lets remote attackers write arbitrary files. Affected versions are 4.2.x prior to 4.2.16, 4.3.x prior to 4.3.9, and 4.4.x prior to 4.4.5. Remediation is to update to TYP...

CVE-2011-0845

Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...