CVE-2011-2257: Medium severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Database Target Type Menus component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

10 affected components

Oracle Database Server=10.1.0.5

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Enterprise Manager Grid Control=10.1.0.6

Oracle Enterprise Manager Grid Control=10.2.0.5

Oracle Enterprise Manager Grid Control=11.1.0.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2257?

CVE-2011-2257 is considered a critical vulnerability that can affect the confidentiality of data in Oracle Database Server and Oracle Enterprise Manager.

How do I fix CVE-2011-2257?

To mitigate CVE-2011-2257, it is recommended to apply the latest security patches provided by Oracle for the affected versions.

Which versions of Oracle Database are affected by CVE-2011-2257?

CVE-2011-2257 affects Oracle Database versions 10.1.0.5 through 11.2.0.2.

Is Oracle Enterprise Manager Grid Control affected by CVE-2011-2257?

Yes, CVE-2011-2257 also affects certain versions of Oracle Enterprise Manager Grid Control, specifically versions 10.1.0.6, 10.2.0.5, and 11.1.0.1.

What type of attacks can CVE-2011-2257 facilitate?

CVE-2011-2257 allows remote attackers to exploit the vulnerability and potentially affect the confidentiality of data within the affected systems.