| Vulnerability Name: | CVE-2012-0527 (CCN-74944) | ||||||||
| Assigned: | 2012-04-17 | ||||||||
| Published: | 2012-04-17 | ||||||||
| Updated: | 2016-11-28 | ||||||||
| Summary: | Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0526. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N) 3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Other | ||||||||
| References: | Source: MITRE Type: CNA CVE-2012-0527 Source: SUSE Type: UNKNOWN SUSE-SU-2012:1020 Source: MANDRIVA Type: UNKNOWN MDVSA-2013:150 Source: CCN Type: Oracle Critical Patch Update Advisory - April 2012 Oracle Critical Patch Update Advisory - April 2012 Source: CONFIRM Type: Vendor Advisory http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html Source: CCN Type: OSVDB ID: 81271 Oracle Database Server / Enterprise Manager Database Grid Control /em/console/database/schema/grantObjPrivs pageName Parameter HTTP Response Splitting Source: CCN Type: BID-53093 Oracle Database Server CVE-2012-0527 Remote HTTP Response Splitting Vulnerability Source: SECTRACK Type: UNKNOWN 1026929 Source: XF Type: UNKNOWN database-embp-cve20120527(74944) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||