CVE-2011-0852 — Oracle Database Server vulnerability

3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.5%
top 34.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Database ServerOracle Enterprise Manager Grid Control
Timeline
PublishedJul 20
Latest updateMay 17

Description

Unspecified vulnerability in the Security Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, and 10.2.0.4; and Oracle Enterprise Manager Grid Control 10.1.0.6; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Audit Administration.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDoracle/database_server10.1.0.5, 10.2.0.3, 10.2.0.4+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-728q-h943-6mxx: Unspecified vulnerability in the Security Management component in Oracle Database Server 10↗2022-05-17
▶
CVEList
CVE-2011-0852: Unspecified vulnerability in the Security Management component in Oracle Database Server 10↗2011-07-20
▶
CVE-2011-0852 — Oracle Database Server vulnerability | cvebase