CVE-2012-0525: Medium severity oracle database vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.

Affected Software

5 affected components

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Oracle Enterprise Manager Grid Control=10.2.0.5

Oracle Enterprise Manager Grid Control=11.1.0.1

Event History

May 3, 2012

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0525?

CVE-2012-0525 has been assigned a severity rating but specific metrics should be checked in the official vulnerability database.

How can I mitigate the risk associated with CVE-2012-0525?

To mitigate the risk of CVE-2012-0525, ensure that your Oracle Database Server and Enterprise Manager versions are updated to the latest available patches.

Which versions are affected by CVE-2012-0525?

CVE-2012-0525 affects Oracle Database Server versions 11.1.0.7, 11.2.0.2, 11.2.0.3 and Oracle Enterprise Manager Grid Control versions 10.2.0.5 and 11.1.0.1.

Is CVE-2012-0525 exploitable remotely?

Yes, CVE-2012-0525 can be exploited by remote authenticated users, potentially affecting confidentiality and integrity.

Should I be concerned about CVE-2012-0525 if I’m using affected Oracle products?

Yes, if you are using any affected versions of Oracle products, you should be concerned and take steps to apply necessary security updates.