CVE-2012-0528: Medium severity oracle database vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7, and Oracle Enterprise Manager Grid Control, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security Framework.

Affected Software

5 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Enterprise Manager Grid Control

Event History

May 3, 2012

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0528?

CVE-2012-0528 has a medium severity level as it impacts the confidentiality and integrity of data.

How do I fix CVE-2012-0528?

To fix CVE-2012-0528, apply the latest patches provided by Oracle for the affected versions of the Oracle Database and Enterprise Manager Grid Control.

Which versions are affected by CVE-2012-0528?

CVE-2012-0528 affects Oracle Database Server versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and Oracle Enterprise Manager Grid Control.

What kind of attacks does CVE-2012-0528 allow?

CVE-2012-0528 allows remote attackers to potentially exploit unknown vectors that affect the confidentiality and integrity of the database.

Is CVE-2012-0528 specific to Oracle software?

Yes, CVE-2012-0528 is specific to certain versions of Oracle Database and Oracle Enterprise Manager software.