CVE-2011-0882 — Oracle Database Server vulnerability

4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
0.5%
top 34.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Database ServerOracle Enterprise Manager Grid Control
Timeline
PublishedJul 20
Latest updateMay 17

Description

Unspecified vulnerability in the Content Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and 11.1.0.7; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDoracle/enterprise_manager_grid_control10.1.0.6, 10.2.0.5, 11.1.0.1+2
▶NVDoracle/database_server4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x8c4-c7gc-p944: Unspecified vulnerability in the Content Management component in Oracle Database Server 10↗2022-05-17
▶
CVEList
CVE-2011-0882: Unspecified vulnerability in the Content Management component in Oracle Database Server 10↗2011-07-20
▶

📋Vendor Advisories

1
Red Hat
jabberd: DoS via the XML "billion laughs attack"↗2011-05-31
▶
CVE-2011-0882 — Oracle Database Server vulnerability | cvebase