CVE-2016-0427: Medium severity oracle enterprise manager vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework.

Affected Software

4 affected components

Oracle Enterprise Manager Grid Control=11.1.0.1

Oracle Enterprise Manager Grid Control=11.2.0.4

Oracle Enterprise Manager Grid Control=12.4.0.2

Oracle Enterprise Manager Grid Control=12.5.0.2

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0427?

CVE-2016-0427 has not been assigned a specific severity rating, but it poses a risk to confidentiality for remote authenticated users.

How do I fix CVE-2016-0427?

To mitigate CVE-2016-0427, apply the latest security patches provided by Oracle for the affected versions of Oracle Enterprise Manager Grid Control.

What versions of Oracle Enterprise Manager Grid Control are affected by CVE-2016-0427?

CVE-2016-0427 affects Oracle Enterprise Manager Grid Control versions 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5.

What type of vulnerability is CVE-2016-0427?

CVE-2016-0427 is an unspecified vulnerability related to the UI Framework in the Enterprise Manager Base Platform.

Can CVE-2016-0427 be exploited remotely?

Yes, CVE-2016-0427 can be exploited by remote authenticated users through unknown vectors.