CVE-2013-0396: Medium severity oracle enterprise manager vulnerability

Published Jan 17, 2013

Updated

Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0360.

Affected Software

3 affected components

Oracle Enterprise Manager Grid Control=6.5

Oracle Enterprise Manager Grid Control=11.1

Oracle Enterprise Manager Grid Control=12.1.0.2

Event History

Jan 17, 2013

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0396?

The severity of CVE-2013-0396 has not been explicitly rated, but it allows remote attackers to affect system integrity.

How do I fix CVE-2013-0396?

To fix CVE-2013-0396, apply the latest security patches provided by Oracle for the affected versions of Oracle Enterprise Manager Grid Control.

What software is affected by CVE-2013-0396?

CVE-2013-0396 affects Oracle Enterprise Manager Grid Control versions 6.5, 11.1, and 12.1.0.2.

Can CVE-2013-0396 be exploited remotely?

Yes, CVE-2013-0396 can be exploited remotely by attackers to affect the integrity of the application.

What components are involved in CVE-2013-0396?

CVE-2013-0396 involves an unspecified vulnerability in the Application Performance Management component related to Business Transaction Management.