CVE-2011-2232: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, and Oracle Fusion Middleware 10.1.3.5, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

6 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=11.2.0.1

Oracle Fusion Middleware=10.1.3.5

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·10:36 PM

Data Sourced

via MITRE·10:36 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2232?

CVE-2011-2232 has a moderate severity rating due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2011-2232?

To fix CVE-2011-2232, Oracle recommends applying the latest security patches available for the affected versions of Oracle Database Server and Oracle Fusion Middleware.

Which Oracle products are affected by CVE-2011-2232?

CVE-2011-2232 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, as well as Oracle Fusion Middleware version 10.1.3.5.

Can CVE-2011-2232 be exploited remotely?

Yes, CVE-2011-2232 can potentially be exploited by remote authenticated users.

What kind of vulnerabilities does CVE-2011-2232 introduce?

CVE-2011-2232 can affect the confidentiality, integrity, and availability of the affected systems.