CVE-2010-2390: High severity oracle database vulnerability

Published Oct 13, 2010

Updated

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

5 affected components

ORACLE Database Server=10.2.0.3

ORACLE Database Server=10.1.0.5

ORACLE Fusion Middleware=10.1.4.3

ORACLE Fusion Middleware=10.1.2.3

ORACLE Enterprise Manager Grid Control

Event History

Oct 13, 2010

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2390?

CVE-2010-2390 is considered to have a critical severity due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2010-2390?

To fix CVE-2010-2390, update your Oracle Database Server and Oracle Fusion Middleware to the latest patched versions as recommended by Oracle.

Which versions of Oracle are affected by CVE-2010-2390?

CVE-2010-2390 affects Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Oracle Enterprise Manager Grid Control.

Can CVE-2010-2390 be exploited remotely?

Yes, CVE-2010-2390 can be exploited remotely, allowing attackers to compromise the affected systems.

What are the implications of CVE-2010-2390?

The implications of CVE-2010-2390 include potential unauthorized access, data exposure, and disruption of services.