Vulnerability CVE-2015-0426

Vulnerability Name:

CVE-2015-0426 (CCN-100092)

Assigned:

2014-12-17

Published:

2015-01-20

Updated:

2017-01-03

Summary:

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2015-0426

Source: CCN
Type: Oracle Critical Patch Update Advisory - January 2015
Oracle Critical Patch Update Advisory - January 2015

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: BID
Type: UNKNOWN
72235

Source: CCN
Type: BID-72235
Oracle Enterprise Manager Base Platform CVE-2015-0426 Remote Security Vulnerability

Source: XF
Type: UNKNOWN
oracle-cpujan2015-cve20150426(100092)

Vulnerable Configuration:

Configuration 1:

cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.4:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:oracle:enterprise_manager:-:*:*:*:*:*:*:*

OR cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:enterprise_manager_grid_control:12.1.0.4:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK