Oracle Enterprise Manager Grid Control vulnerabilities
80 known vulnerabilities affecting oracle/enterprise_manager_grid_control.
Total CVEs
80
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH6MEDIUM68LOW3
Vulnerabilities
Page 2 of 4
CVE-2016-0415P4MEDIUMCVSS 6.8v11.1.0.1v12.1.0.4+1 more2016-01-21
CVE-2016-0415 [MEDIUM] CVE-2016-0415: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to UI Framework.
nvd
CVE-2006-1884P4CRITICALCVSS 10.0v10.1.0.3v10.1.0.4+1 more2006-04-20
CVE-2006-1884 [CRITICAL] CVE-2006-1884: Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business S
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
nvd
CVE-2011-0845P4MEDIUMCVSS 6.8v10.1.0.62011-07-20
CVE-2011-0845 [MEDIUM] CVE-2011-0845: Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Contro
Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2016-0442P4MEDIUMCVSS 6.5v12.1.0.4v12.1.0.52016-01-21
CVE-2016-0442 [MEDIUM] CVE-2016-0442: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service.
nvd
CVE-2015-4859P4MEDIUMCVSS 5.8v12.1.0.4v12.1.0.52015-10-21
CVE-2015-4859 [MEDIUM] CVE-2015-4859: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Agent Next Gen.
nvd
CVE-2004-1365P4MEDIUMCVSS 4.6v10.1.0.22004-08-04
CVE-2004-1365 [MEDIUM] CVE-2004-1365: Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
nvd
CVE-2004-1366P4MEDIUMCVSS 4.6v10.1.0.22004-08-04
CVE-2004-1366 [MEDIUM] CWE-255 CVE-2004-1366: Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-read
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
nvd
CVE-2015-2647P4MEDIUMCVSS 5.5v11.1.0.12015-07-16
CVE-2015-2647 [MEDIUM] CVE-2015-2647: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterpri
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content
nvd
CVE-2015-4875P4MEDIUMCVSS 5.0v12.1.0.5v12.1.0.62015-10-21
CVE-2015-4875 [MEDIUM] CVE-2015-4875: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote attackers to affect availability via unknown vectors related to Agent Next Gen.
nvd
CVE-2011-0875P4MEDIUMCVSS 5.5v10.1.0.6v10.2.0.5+1 more2011-07-20
CVE-2011-0875 [MEDIUM] CVE-2011-0875: Unspecified vulnerability in the EMCTL component in Oracle Database Server 11.1.0.7 and Oracle Enter
Unspecified vulnerability in the EMCTL component in Oracle Database Server 11.1.0.7 and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2015-4735P4MEDIUMCVSS 5.0v11.1.0.12015-07-16
CVE-2015-4735 [MEDIUM] CWE-200 CVE-2015-4735: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterpri
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.
nvd
CVE-2011-0816P4MEDIUMCVSS 5.5v10.1.0.6v10.2.0.52011-07-20
CVE-2011-0816 [MEDIUM] CVE-2011-0816: Unspecified vulnerability in the CMDB Metadata & Instance APIs component in Oracle Database Server 1
Unspecified vulnerability in the CMDB Metadata & Instance APIs component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2011-0831P4MEDIUMCVSS 5.5v10.1.0.6v10.2.0.52011-07-20
CVE-2011-0831 [MEDIUM] CVE-2011-0831: Unspecified vulnerability in the Enterprise Config Management component in Oracle Database Server 10
Unspecified vulnerability in the Enterprise Config Management component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5; allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2015-0426P4MEDIUMCVSS 5.0v12.1.0.3v12.1.0.42015-01-21
CVE-2015-0426 [MEDIUM] CVE-2015-0426: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework.
nvd
CVE-2012-0520P4MEDIUMCVSS 4.3v10.2.0.5v11.1.0.12012-05-03
CVE-2012-0520 [MEDIUM] CVE-2012-0520: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Serve
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related to Security Framework.
nvd
CVE-2012-0525P4MEDIUMCVSS 4.9v10.2.0.5v11.1.0.12012-05-03
CVE-2012-0525 [MEDIUM] CVE-2012-0525: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Serve
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.
nvd
CVE-2015-4885P4MEDIUMCVSS 4.3v12.1.0.42016-01-21
CVE-2015-4885 [MEDIUM] CVE-2015-4885: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Man
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 allows remote attackers to affect confidentiality via vectors related to Agent Next Gen.
nvd
CVE-2015-2646P4MEDIUMCVSS 4.3v11.1.0.12015-07-16
CVE-2015-2646 [MEDIUM] CVE-2015-2646: Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterpri
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via unknown vectors related to Content Management.
nvd
CVE-2012-0527P4MEDIUMCVSS 4.3v10.2.0.52012-05-03
CVE-2012-0527 [MEDIUM] CVE-2012-0527: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Serve
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0526.
nvd
CVE-2012-0526P4MEDIUMCVSS 4.3v10.2.0.52012-05-03
CVE-2012-0526 [MEDIUM] CVE-2012-0526: Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Serve
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0527.
nvd