Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-1737

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.1, and EM Plugin for DB 12.1.0.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to DB Performance Advisories/UIs.

Published

2012-07-17T22:55:01.803

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle database_server 11.1.0.7 Yes
Application oracle database_server 11.2.0.2 Yes
Application oracle database_server 11.2.0.3 Yes
Application oracle enterprise_manager_grid_control 10.2.0.5 Yes
Application oracle enterprise_manager_grid_control 11.1.0.1 Yes
Application oracle enterprise_manager_grid_control 12.1.0.1 Yes
Application oracle enterprise_manager_grid_control 12.1.0.2 Yes
References