CVE-2011-2248 — Oracle Database Server vulnerability

3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.7%
top 28.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Database ServerOracle Enterprise Manager Grid Control
Timeline
PublishedJul 20
Latest updateMay 17

Description

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, related to SQL Details UI & Explain Plan.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDoracle/enterprise_manager_grid_control10.1.0.6, 10.2.0.5, 11.1.0.1+2
▶NVDoracle/database_server11.1.0.7, 11.2.0.1, 11.2.0.2+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7hc8-j4c9-mf24: Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11↗2022-05-17
▶
CVEList
CVE-2011-2248: Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11↗2011-07-20
▶
CVE-2011-2248 — Oracle Database Server vulnerability | cvebase