Solaris 10 (x86) : 123896-77

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network...

Solaris 10 (sparc) : 123893-77

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network...

Solaris 10 (x86) : 123896-79

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network...

CVE-2017-10091

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2017-11089

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0, 13.1.0, and 13.2.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Enterprise Manager Base Platform, potentially impacting additional...

CVE-2017-10091: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (July 2017 CPU) (httpoxy)

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Bouncy Castle Java library due to improper validation of a point within the elliptic curve. An...

CVE-2017-3518: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: Discovery Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access v...

PT-2017-15954

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0, 13.1.0, and 13.2.0 Description The issue allows an unauthenticated attacker with network access via HTTPS to compromise the Enterprise Manager Base Platform, resulting in the ability to...

CVE-2017-3311: Undefined Security Weakness

Vulnerability in the Application Testing Suite component of Oracle Enterprise Manager Grid Control subcomponent: Test Manager for Web Apps. Supported versions that are affected are 12.5.0.3, 12.5.0.2 and 12.4.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

PT-2017-15772

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2, 12.5.0.2, 12.5.0.3 Description The issue affects the Application Testing Suite component, specifically the Test Manager for Web Apps subcomponent. It allows an unauthenticated attacker...

PT-2016-6579

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control version 12.1.0.5 Description The issue affects confidentiality and integrity, and it is related to the Security Framework component. Recommendations For Oracle Enterprise Manager Grid Control version...

CVE-2016-5604: Improper Access Control

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 allows local users to affect confidentiality and integrity via vectors related to Security Framework, a different vulnerability than CVE-2016-3563...

CVE-2016-3494

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning...

CVE-2016-3496: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Enterprise Manager Grid Control 11.1.1.7, and 11.1.1.9 allows remote attackers to affect confidentiality via vectors related to SOA Topology Viewer...

PT-2016-5515

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.4 through 12.3.2 Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to OS Provisioning in the Enterprise Manager Ops...

PT-2016-5517

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 11.1.1.7 through 11.1.1.9 Description The issue affects confidentiality and is related to the SOA Topology Viewer in the Enterprise Manager for Fusion Middleware component. It allows remote...

CVE-2016-3540: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.5 and 13.1.0.0 allows remote attackers to affect confidentiality via vectors related to UI Framework...

CVE-2016-0635: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...

PT-2016-5579

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control version 12.1.0.5 Description The issue affects confidentiality and integrity, and it is related to the Security Framework component. Recommendations For Oracle Enterprise Manager Grid Control version...