CVE-2011-3525: Medium severity oracle database vulnerability

Published Oct 18, 2011

Updated

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.

Affected Software

2 affected components

Oracle Database Server=4.0

Oracle Database Server=3.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

Event History

Oct 18, 2011

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-3525?

CVE-2011-3525 is considered to have moderate severity due to its potential impact on confidentiality, integrity, and availability for remote authenticated users.

How do I fix CVE-2011-3525?

To fix CVE-2011-3525, it is recommended to apply the latest security patch provided by Oracle for Database Server versions 3.2 and 4.0.

Who is affected by CVE-2011-3525?

CVE-2011-3525 affects users of Oracle Database Server versions 3.2 and 4.0 with the Application Express component.

What type of vulnerability is CVE-2011-3525?

CVE-2011-3525 is an unspecified vulnerability that can potentially be exploited by remote authenticated users.

What component of Oracle Database Server does CVE-2011-3525 affect?

CVE-2011-3525 specifically affects the Application Express component of the Oracle Database Server.