CVE-2015-4735: Infoleak

Published Jul 16, 2015

Updated

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.

Affected Software

3 affected components

ORACLE Enterprise Manager Database Control=11.2.0.3

ORACLE Enterprise Manager Database Control=11.2.0.4

ORACLE Enterprise Manager Grid Control=11.1.0.1

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4735?

CVE-2015-4735 has been assigned a severity rating that indicates it allows remote attackers to affect confidentiality.

What software versions are affected by CVE-2015-4735?

CVE-2015-4735 affects Oracle Enterprise Manager Grid Control 11.1.0.1 and Oracle Enterprise Manager Database Control versions 11.2.0.3 and 11.2.0.4.

How do I fix CVE-2015-4735?

To fix CVE-2015-4735, apply the patches provided by Oracle in their security updates.

What type of attack can CVE-2015-4735 facilitate?

CVE-2015-4735 can facilitate attacks that compromise the confidentiality of the system.

Is CVE-2015-4735 specific to any operating system?

CVE-2015-4735 is not specific to any operating system but affects specific versions of Oracle Enterprise Manager software.