CVE-2012-0520: Medium severity oracle database vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related to Security Framework.

Affected Software

7 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Enterprise Manager Grid Control=10.2.0.5

Oracle Enterprise Manager Grid Control=11.1.0.1

Event History

May 3, 2012

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0520?

CVE-2012-0520 is classified as a Medium severity vulnerability.

How do I fix CVE-2012-0520?

To fix CVE-2012-0520, apply the latest security updates and patches provided by Oracle for affected database and enterprise manager versions.

Which Oracle products are affected by CVE-2012-0520?

CVE-2012-0520 affects Oracle Database Server versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, as well as Oracle Enterprise Manager Grid Control versions 10.2.0.5 and 11.1.0.1.

Can CVE-2012-0520 be exploited remotely?

Yes, CVE-2012-0520 can be exploited by remote attackers, affecting the integrity of the systems.

What is the attack vector for CVE-2012-0520?

The attack vector for CVE-2012-0520 is unspecified, allowing potential exploitation through various means.