CVE-2016-0444: Medium severity oracle enterprise manager vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0447 and CVE-2016-0449.

Affected Software

4 affected components

Oracle Enterprise Manager Grid Control=11.1.0.1

Oracle Enterprise Manager Grid Control=11.2.0.4

Oracle Enterprise Manager Grid Control=12.1.0.4

Oracle Enterprise Manager Grid Control=12.1.0.5

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0444?

CVE-2016-0444 has a medium severity level due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-0444?

To fix CVE-2016-0444, it is recommended to apply the latest security patches provided by Oracle for affected versions.

Which versions are affected by CVE-2016-0444?

CVE-2016-0444 affects Oracle Enterprise Manager Grid Control versions 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5.

What impact does CVE-2016-0444 have on systems?

CVE-2016-0444 can affect the confidentiality, integrity, and availability of systems running the affected versions of Oracle Enterprise Manager.

Is there a workaround for CVE-2016-0444 if I cannot apply patches immediately?

There are no widely known specific workarounds for CVE-2016-0444, thus applying the security patches is the best course of action.