CVE-2015-2646: Medium severity oracle enterprise manager for oracle database vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5, 12.1.0.6, 12.1.0.7; EM DB Control: 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote attackers to affect integrity via unknown vectors related to Content Management.

Affected Software

7 affected components

ORACLE Enterprise Manager Database Control=11.1.0.7

ORACLE Enterprise Manager Database Control=11.2.0.3

ORACLE Enterprise Manager Database Control=11.2.0.4

ORACLE Enterprise Manager Grid Control=11.1.0.1

ORACLE Enterprise Manager Plugin For Database Control=12.1.0.5

ORACLE Enterprise Manager Plugin For Database Control=12.1.0.6

ORACLE Enterprise Manager Plugin For Database Control=12.1.0.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2646?

CVE-2015-2646 is classified as a significant vulnerability that can potentially affect the integrity of the affected systems.

How do I fix CVE-2015-2646?

To fix CVE-2015-2646, it is recommended to apply the latest patches and updates provided by Oracle for the affected versions.

Which versions are affected by CVE-2015-2646?

CVE-2015-2646 affects Oracle Enterprise Manager for Oracle Database versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and the EM Plugin for Database Control versions 12.1.0.5, 12.1.0.6, 12.1.0.7.

Can CVE-2015-2646 be exploited remotely?

Yes, CVE-2015-2646 can be exploited by remote attackers, which poses a security risk.

What components of Oracle are affected by CVE-2015-2646?

CVE-2015-2646 affects the Enterprise Manager for Oracle Database component within Oracle Enterprise Manager Grid Control.