CVE-2015-2646

4 documents4 sources

Severity

4.3MEDIUM

EPSS

0.4%

top 42.40%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Enterprise Manager Database Control Oracle Enterprise Manager Grid Control Oracle Enterprise Manager Plugin FOR Database Control

Timeline

PublishedJul 16

Latest updateMay 17

Description

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via unknown vectors related to Content Management.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDoracle/enterprise_manager_database_control11.1.0.7, 11.2.0.3, 11.2.0.4+2

▶NVDoracle/enterprise_manager_grid_control11.1.0.1

▶NVDoracle/enterprise_manager_plugin12.1.0.5, 12.1.0.6, 12.1.0.7+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-rgvc-cf9g-ch6w: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11↗2022-05-17

▶

CVEList

CVE-2015-2646: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11↗2015-07-16

▶

💬Community

Bugzilla

CVE-2015-8369 cacti: SQL injection in graph.php↗2015-12-15

▶