CVE-2016-0415: Medium severity oracle enterprise manager vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to UI Framework.

Affected Software

3 affected components

Oracle Enterprise Manager Grid Control=11.1.0.1

Oracle Enterprise Manager Grid Control=12.1.0.4

Oracle Enterprise Manager Grid Control=12.1.0.5

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0415?

CVE-2016-0415 is considered to have a significant impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-0415?

To mitigate CVE-2016-0415, apply the latest patches released by Oracle for the affected versions of Oracle Enterprise Manager Grid Control.

Which versions of Oracle Enterprise Manager are affected by CVE-2016-0415?

CVE-2016-0415 affects Oracle Enterprise Manager Grid Control versions 11.1.0.1, 12.1.0.4, and 12.1.0.5.

Can CVE-2016-0415 be exploited remotely?

Yes, CVE-2016-0415 allows remote attackers to exploit the vulnerability through unknown vectors.

What component is affected by CVE-2016-0415?

CVE-2016-0415 affects the Enterprise Manager Base Platform component within Oracle Enterprise Manager Grid Control.