CVE-2016-0449: Medium severity oracle enterprise manager vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different vulnerability than CVE-2016-0444 and CVE-2016-0447.

Affected Software

4 affected components

Oracle Enterprise Manager Grid Control=11.1.0.1

Oracle Enterprise Manager Grid Control=11.2.0.4

Oracle Enterprise Manager Grid Control=12.1.0.4

Oracle Enterprise Manager Grid Control=12.1.0.5

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0449?

CVE-2016-0449 is considered to have a critical severity level due to its potential impact on confidentiality, integrity, and availability.

How do I fix CVE-2016-0449?

To fix CVE-2016-0449, it is recommended to apply the latest patches provided by Oracle for affected versions of Enterprise Manager Grid Control.

Which versions are affected by CVE-2016-0449?

CVE-2016-0449 affects Oracle Enterprise Manager Grid Control versions 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5.

Who can exploit the CVE-2016-0449 vulnerability?

CVE-2016-0449 can potentially be exploited by local users who have access to the affected systems.

Is there an official report or advisory for CVE-2016-0449?

Yes, Oracle has released a Critical Patch Update Advisory detailing CVE-2016-0449 and its remediation.