CVE-2014-6488: Low severity oracle enterprise manager vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4 EM Plugin for DB: 12.1.0.4, 12.1.0.5, and 12.1.0.6 allows remote authenticated users to affect integrity via unknown vectors related to Content Management.

Affected Software

8 affected components

ORACLE Enterprise Manager Grid Control=10.2.0.5

ORACLE Enterprise Manager Grid Control=11.1.0.1

ORACLE Enterprise Manager Grid Control=12.1.0.4

ORACLE Enterprise Manager Grid Control=12.1.0.5

ORACLE Enterprise Manager Grid Control=12.1.0.6

ORACLE Enterprise Manager Database Control=11.1.0.7

ORACLE Enterprise Manager Database Control=11.2.0.3

ORACLE Enterprise Manager Database Control=11.2.0.4

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6488?

CVE-2014-6488 has a moderate severity level that can potentially allow unauthorized access to sensitive information.

How do I fix CVE-2014-6488?

To address CVE-2014-6488, users should apply the latest patches provided by Oracle for their specific version of the Enterprise Manager software.

Who is affected by CVE-2014-6488?

CVE-2014-6488 affects remote authenticated users of Oracle Enterprise Manager Grid Control and Database Control across several versions.

Is CVE-2014-6488 part of a larger security issue?

CVE-2014-6488 is related to broader concerns within Oracle's Enterprise Manager security and emphasizes the need for regular updates.

Can CVE-2014-6488 be exploited remotely?

Yes, CVE-2014-6488 can be exploited by remote authenticated users, making it critical to manage user permissions carefully.