First published: Wed Jul 20 2011(Updated: )
Unspecified vulnerability in the Security Framework component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality and integrity via unknown vectors related to Authentication.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Database | =10.2.0.4 | |
Oracle Database | =10.2.0.3 | |
Oracle Database | =11.2.0.1 | |
Oracle Database | =11.2.0.2 | |
Oracle Database | =10.2.0.5 | |
Oracle Database | =10.1.0.5 | |
Oracle Database | =11.1.0.7 | |
Oracle Enterprise Manager Grid Control 10g | =10.1.0.6 | |
Oracle Enterprise Manager Grid Control 10g | =11.1.0.1 | |
Oracle Enterprise Manager Grid Control 10g | =10.2.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2244 is classified as a high severity vulnerability that affects the confidentiality and integrity of data in the Oracle Database Server and Enterprise Manager Grid Control.
To fix CVE-2011-2244, you should apply the latest patches provided by Oracle for the affected versions of the Database Server and Enterprise Manager Grid Control.
CVE-2011-2244 affects various versions of Oracle Database Server, including 10.1.0.5, 10.2.0.3 to 10.2.0.5, 11.1.0.7, and 11.2.0.1 to 11.2.0.2, as well as specific versions of Enterprise Manager Grid Control.
Yes, CVE-2011-2244 can be exploited remotely by attackers to compromise the confidentiality and integrity of data.
The potential impacts of CVE-2011-2244 include unauthorized access to sensitive data and possible alteration of critical database information.