CVE-2011-2248: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, related to SQL Details UI & Explain Plan.

Affected Software

6 affected components

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Database Server=11.1.0.7

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=11.1.0.1

Oracle Enterprise Manager Grid Control=10.2.0.5

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2248?

CVE-2011-2248 has been classified as a critical vulnerability affecting Oracle Database Server and Oracle Enterprise Manager Grid Control.

How do I fix CVE-2011-2248?

To fix CVE-2011-2248, you should apply the latest security patch provided by Oracle for the affected versions of their software.

Which versions are affected by CVE-2011-2248?

CVE-2011-2248 affects Oracle Database versions 11.1.0.7, 11.2.0.1, 11.2.0.2 and Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5, 11.1.0.1.

What types of attacks can CVE-2011-2248 allow?

CVE-2011-2248 allows remote attackers to affect the confidentiality, integrity, and availability of the affected systems.

Is there a workaround for CVE-2011-2248?

There are no specific workarounds for CVE-2011-2248; updating to the latest software version is recommended.