CVE-2011-0785: Medium severity Oracle Database Server vulnerability

Published Apr 20, 2011

Updated

Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors.

Affected Software

10 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Database Server=10.2.0.5

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Oracle Fusion Middleware=11.1.1.2.0

Oracle Fusion Middleware=11.1.1.4.0

Oracle Fusion Middleware=11.1.1.3.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html

Event History

Apr 20, 2011

CVE Published

via MITRE·03:09 AM

Data Sourced

via MITRE·03:09 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0785?

The severity of CVE-2011-0785 is classified as critical due to the potential impact on application integrity.

How do I fix CVE-2011-0785?

To fix CVE-2011-0785, it is recommended to upgrade to the latest patch or version of the affected Oracle Database Server or Oracle Fusion Middleware.

Which versions are affected by CVE-2011-0785?

CVE-2011-0785 affects Oracle Database Server versions from 10.1.0.5 to 11.2.0.2 and Oracle Fusion Middleware versions from 11.1.1.2.0 to 11.1.1.4.0.

What types of attacks does CVE-2011-0785 allow?

CVE-2011-0785 allows remote attackers to potentially affect integrity via unspecified vectors.

Is there a workaround for CVE-2011-0785?

Currently, no specific workaround is recommended for CVE-2011-0785 other than applying the necessary patches or updates.