PT-2015-5807 · Oracle · Oracle Enterprise Manager Grid Control Em Base Platform+2

Published

2015-07-16

·

Updated

2016-12-28

·

CVE-2015-2647

CVSS v2.0

5.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform version 11.1.0.1 Oracle EM Plugin for DB versions 12.1.0.5 through 12.1.0.7 Oracle EM DB Control versions 11.1.0.7, 11.2.0.3, 11.2.0.4
Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Content Management.
Recommendations For Oracle Enterprise Manager Grid Control EM Base Platform version 11.1.0.1, update to a version that addresses this issue. For Oracle EM Plugin for DB versions 12.1.0.5 through 12.1.0.7, update to a version that addresses this issue. For Oracle EM DB Control versions 11.1.0.7, 11.2.0.3, 11.2.0.4, update to a version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2015-2647
SUSE-SU-2015:1353-1

Affected Products

Oracle Em Db Control
Oracle Em Plugin For Db
Oracle Enterprise Manager Grid Control Em Base Platform