CVE-2015-2647

3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.2%

top 59.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Enterprise Manager Database Control Oracle Enterprise Manager Grid Control Oracle Enterprise Manager Plugin FOR Database Control

Timeline

PublishedJul 16

Latest updateMay 17

Description

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 8.0 | Impact: 4.9

Affected Packages3 packages

▶NVDoracle/enterprise_manager_database_control11.1.0.7, 11.2.0.3, 11.2.0.4+2

▶NVDoracle/enterprise_manager_grid_control11.1.0.1

▶NVDoracle/enterprise_manager_plugin12.1.0.5, 12.1.0.6, 12.1.0.7+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-xwxw-ph5c-h3rg: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11↗2022-05-17

▶

CVEList

CVE-2015-2647: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11↗2015-07-16

▶