CVE-2015-4735

CWE-200 — Information Exposure3 documents3 sources

Severity

5.0MEDIUM

EPSS

0.5%

top 36.02%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Enterprise Manager Database Control Oracle Enterprise Manager Grid Control

Timeline

PublishedJul 16

Latest updateMay 17

Description

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/enterprise_manager_database_control11.2.0.3, 11.2.0.4+1

▶NVDoracle/enterprise_manager_grid_control11.1.0.1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-c3mp-xm82-4vr9: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11↗2022-05-17

▶

CVEList

CVE-2015-4735: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11↗2015-07-16

▶