CVE-2012-3219

Oracle EM/Database Control Segment Advisor vulnerability (CVE-2012-3219) involves an arbitrary URL redirection/phishing flaw in the EM Segment Advisor page. Affected products match the CVE entry: Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3...

CVE-2013-0374

Summary (CVE-2013-0374) : A SQL Injection vulnerability exists in Oracle Enterprise Manager components, specifically in the dBClone path of the OEM web application. Affected: Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5,...

CVE-2013-0372

CVE-2013-0372 affects Oracle Enterprise Manager products (EM Base Platform/Grid Control and EM DB Control) with an SQL Injection vulnerability in the advReplicationAdmin path of the OEM web application, enabling remote attackers to execute SQL in the backend database. Affected versions include EM...

CVE-2013-3758

Technical details about CVE-2013-3758 are not publicly available in the provided documents; monitor for updates from Oracle and security advisories.

CVE-2015-2646

CVE-2015-2646 affects Oracle Enterprise Manager Grid Control Content Management. The vulnerability lies in the Content Management component and can impact integrity; affected products include EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.5–12.1.0.7, and EM DB Control 11.1.0.7, 11.2.0.3, 11.2...

CVE-2013-0353

CVE-2013-0353 affects Oracle Enterprise Manager Grid Control EM Base Platform and related EM components. The TeamSHATTER advisory documents a SQL Injection vulnerability in the EM web application (notably /em/console/ecm/config/savedConfig) that can be exploited remotely to execute statements wit...

CVE-2013-0373

CVE-2013-0373 affects Oracle Enterprise Manager products: EM Base Platform 10.2.0.5 and 11.1.0.1; EM Database Control 10.2.0.3/4/5, 11.1.0.7, 11.2.0.2/3; and EM Plugin for DB 12.1.0.1/12.1.0.2. The vulnerability is SQL Injection in the OEM streams queue path, enabling remote exploitation to execu...

CVE-2013-5766

CVE-2013-5766 affects Oracle Enterprise Manager Grid Control/DB Control and the DB Plugin for 12.1.x. Affected components include EM Base Platform (10.2.0.5, 11.1.0.1), EM DB Control (11.1.0.7, 11.2.0.2, 11.2.0.3), and EM Plugin for DB (12.1.0.2–12.1.0.3). The description notes an unspecified rem...

CVE-2013-5828

CVE-2013-5828 affects Oracle Enterprise Manager Grid Control and related components. Specifically, the Enterprise Manager Base Platform components EM Base Platform (versions 10.2.0.5 and 11.1.0.1), EM DB Control (11.1.0.7, 11.2.0.2, 11.2.0.3), and the EM Plugin for DB (12.1.0.2 and 12.1.0.3) are ...

CVE-2013-0358

CVE-2013-0358 is supported by a TeamSHATTER advisory detailing a SQL Injection in Oracle Enterprise Manager (Resource Manager) affecting OEM Database Control 10.2.0.3/10.2.0.4/10.2.0.5, 11.1.0.7, 11.2.0.2/11.2.0.3 and EM Plugin for DB 12.1.0.1/12.1.0.2. The issue arises from vulnerable parameters...

CVE-2013-3762

CVE-2013-3762 corresponds to an unspecified vulnerability in Oracle Enterprise Manager Grid Control EM Base Platform and related components (EM Base Platform 10.2.0.5/11.1.0.1; EM DB Control 11.1.0.7/11.2.0.2/11.2.0.3; EM Plugin for DB 12.1.0.2/12.1.0.3/12.1.0.4) that allows remote attackers to a...

CVE-2015-2647

CVE-2015-2647 affects Oracle Enterprise Manager Grid Control and related EM components (EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5/6/7; EM DB Control 11.1.0.7, 11.2.0.3/4) as described in the SUSE security bulletin. The vulnerability is located in the Content Management subcomponent and...

CVE-2013-5827

CVE-2013-5827 affects Oracle Enterprise Manager Grid Control EM Base Platform (10.2.0.5, 11.1.0.1), EM DB Control (11.1.0.7, 11.2.0.2, 11.2.0.3) and EM Plugin for DB (12.1.0.2). The vulnerability is described as an unspecified issue in the Storage Management area that could allow remote attackers...

CVE-2013-0352

Oracle CVE-2013-0352 describes a Cross‑Site Scripting vulnerability in Oracle Enterprise Manager components, specifically the EM Database Control/XML Database Resources page via the cancelURL parameter. An attacker could remotely exploit this to steal session cookies and impersonate a legitimate ...