CVE-2009-1967: Medium severity Oracle Enterprise Manager vulnerability

Published Jul 14, 2009

Updated

Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966.

Affected Software

2 affected components

Oracle Enterprise Manager=10.2.0.4

Oracle Database Server=11.1.0.7

Event History

Jul 14, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1967?

CVE-2009-1967 is classified as having a moderate severity, affecting confidentiality and integrity.

How do I fix CVE-2009-1967?

To address CVE-2009-1967, Oracle recommends applying the latest patches for Oracle Database 11.1.0.7 and Oracle Enterprise Manager 10.2.0.4.

Who is affected by CVE-2009-1967?

CVE-2009-1967 affects remote authenticated users of Oracle Database 11.1.0.7 and Oracle Enterprise Manager 10.2.0.4.

What components are involved in CVE-2009-1967?

CVE-2009-1967 involves the Config Management component of Oracle Database and Oracle Enterprise Manager.

What potential impacts does CVE-2009-1967 have?

CVE-2009-1967 could allow remote authenticated users to compromise the confidentiality and integrity of data.