First published: Thu Jan 17 2013(Updated: )
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Enterprise Manager for Oracle Database | =10.2.0.3 | |
Oracle Enterprise Manager for Oracle Database | =10.2.0.4 | |
Oracle Enterprise Manager for Oracle Database | =10.2.0.5 | |
Oracle Enterprise Manager for Oracle Database | =11.1.0.7 | |
Oracle Enterprise Manager for Oracle Database | =11.2.0.2 | |
Oracle Enterprise Manager for Oracle Database | =11.2.0.3 | |
Oracle Enterprise Manager Grid Control 10g | =10.2.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2012-5062 is categorized as a medium risk due to its potential impact on data integrity.
To fix CVE-2012-5062, it is recommended to apply the latest patches provided by Oracle for affected versions of the Enterprise Manager.
CVE-2012-5062 affects Oracle Enterprise Manager Database Control versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, as well as Oracle Enterprise Manager Grid Control version 10.2.0.5.
CVE-2012-5062 can potentially allow remote attackers to affect the integrity of the data managed by the Enterprise Manager via unknown vectors.
Currently, the best approach to mitigate CVE-2012-5062 is to update Oracle Enterprise Manager to the latest patched versions.