CVE-2015-2647: Medium severity oracle enterprise manager vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.

Affected Software

7 affected components

ORACLE Enterprise Manager Plugin For Database Control=12.1.0.5

ORACLE Enterprise Manager Plugin For Database Control=12.1.0.6

ORACLE Enterprise Manager Plugin For Database Control=12.1.0.7

ORACLE Enterprise Manager Database Control=11.1.0.7

ORACLE Enterprise Manager Database Control=11.2.0.3

ORACLE Enterprise Manager Database Control=11.2.0.4

ORACLE Enterprise Manager Grid Control=11.1.0.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2647?

CVE-2015-2647 is rated as a medium severity vulnerability.

How do I fix CVE-2015-2647?

To fix CVE-2015-2647, apply the latest patches released by Oracle for the affected versions.

Which Oracle products are affected by CVE-2015-2647?

CVE-2015-2647 affects Oracle Enterprise Manager for Database components, including specific versions of the EM Plugin and EM DB Control.

Can CVE-2015-2647 be exploited remotely?

CVE-2015-2647 can be exploited by remote authenticated users.

What type of vulnerability is CVE-2015-2647?

CVE-2015-2647 is an unspecified vulnerability that may affect data confidentiality and integrity.