CVE-2012-0527: Medium severity oracle database vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0526.

Affected Software

7 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Oracle Enterprise Manager Grid Control=10.2.0.5

Event History

May 3, 2012

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0527?

CVE-2012-0527 has a Medium severity rating, indicating that it poses a moderate risk to the affected systems.

How do I fix CVE-2012-0527?

To fix CVE-2012-0527, it is recommended to apply the latest patches provided by Oracle for the affected versions of Oracle Database and Oracle Enterprise Manager.

What are the affected software versions for CVE-2012-0527?

CVE-2012-0527 affects Oracle Database versions 10.2.0.3 through 11.2.0.3 and Oracle Enterprise Manager Grid Control version 10.2.0.5.

Are remote attacks possible due to CVE-2012-0527?

Yes, CVE-2012-0527 allows remote attackers to affect the integrity of the affected systems through unspecified vectors.

How can I verify if my system is vulnerable to CVE-2012-0527?

You can verify if your system is vulnerable to CVE-2012-0527 by checking the version of Oracle Database and Oracle Enterprise Manager installed against the affected versions list.