First published: Wed Jul 20 2011(Updated: )
Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, related to SQL Details UI & Explain Plan.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Database | =11.1.0.7 | |
Oracle Database | =11.2.0.1 | |
Oracle Database | =11.2.0.2 | |
Oracle Enterprise Manager Grid Control 10g | =10.1.0.6 | |
Oracle Enterprise Manager Grid Control 10g | =10.2.0.5 | |
Oracle Enterprise Manager Grid Control 10g | =11.1.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2248 has been classified as a critical vulnerability affecting Oracle Database Server and Oracle Enterprise Manager Grid Control.
To fix CVE-2011-2248, you should apply the latest security patch provided by Oracle for the affected versions of their software.
CVE-2011-2248 affects Oracle Database versions 11.1.0.7, 11.2.0.1, 11.2.0.2 and Oracle Enterprise Manager Grid Control versions 10.1.0.6, 10.2.0.5, 11.1.0.1.
CVE-2011-2248 allows remote attackers to affect the confidentiality, integrity, and availability of the affected systems.
There are no specific workarounds for CVE-2011-2248; updating to the latest software version is recommended.