CVE-2013-0352

Oracle CVE-2013-0352 describes a Cross‑Site Scripting vulnerability in Oracle Enterprise Manager components, specifically the EM Database Control/XML Database Resources page via the cancelURL parameter. An attacker could remotely exploit this to steal session cookies and impersonate a legitimate ...

CVE-2013-0374

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote...

CVE-2012-3219

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

PT-2013-2250

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 and 11.1.0.1 Oracle EM DB Control versions 10.2.0.3 through 10.2.0.5 and versions 11.1.0.7 through 11.2.0.3 Oracle EM Plugin for DB versions 12.1.0.1 and 12.1.0.2...

CVE-2013-0372: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vecto...

CVE-2013-0373: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote...

CVE-2013-0355: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to...

CVE-2012-3219: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

CVE-2013-0354: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Policy Framework...

CVE-2013-0353: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vecto...

PT-2013-2251

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 through 11.1.0.1 Oracle EM DB Control versions 11.1.0.7 through 11.2.0.3 Oracle EM Plugin for DB version 12.1.0.1 Description The issue affects the integrity of the...

PT-2013-2270

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 11.1.0.1 through 12.1.0.1 Oracle EM DB Control versions 11.1.0.7 through 11.2.0.3 Oracle EM Plugin for DB version 12.1.0.2 Description The issue affects the integrity of the...

PT-2013-2271

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 and 11.1.0.1 Oracle EM DB Control versions 10.2.0.3 through 10.2.0.5 and versions 11.1.0.7 through 11.2.0.3 Oracle EM Plugin for DB versions 12.1.0.1 and 12.1.0.2...

PT-2013-2253

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 through 11.1.0.1 Oracle EM DB Control versions 11.1.0.7 through 11.2.0.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit ...

PT-2013-2272

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 and 11.1.0.1 EM DB Control versions 10.2.0.3 through 11.2.0.3 EM Plugin for DB versions 12.1.0.1 through 12.1.0.2 Description The issue affects the integrity of the...

CVE-2013-0358: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...

PT-2013-1581

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 and 11.1.0.1 Oracle EM DB Control versions 10.2.0.3 through 10.2.0.5 and versions 11.1.0.7 through 11.2.0.3 Oracle EM Plugin for DB versions 12.1.0.1 through 12.1.0.2...

PT-2012-3489

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.1.0.7, 11.2.0.2, and 11.2.0.3 Enterprise Manager Grid Control EM Base Platform version 10.2.0.5 Enterprise Manager Grid Control EM Base Platform version 11.1.0.1 EM Plugin for DB version 12.1.0.1 EM Plugin fo...

CVE-2010-5102

Directory traversal vulnerability in mod/tools/em/class.emunzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors...

CVE-2010-5102

TYPO3 4.2.x/4.3.x/4.4.x contain a directory traversal vulnerability in the unzip library (mod/tools/em/class.em_unzip.php) that lets remote attackers write arbitrary files. Affected versions are 4.2.x prior to 4.2.16, 4.3.x prior to 4.3.9, and 4.4.x prior to 4.4.5. Remediation is to update to TYP...