CVE-2017-10091: High severity oracle enterprise manager vulnerability
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: UI Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. While the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Enterprise Manager Base Platform accessible data. CVSS 3.0 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10091?
The severity of CVE-2017-10091 is rated as high with a score of 7.7.
What versions are affected by CVE-2017-10091?
CVE-2017-10091 affects Oracle Enterprise Manager Base Platform versions 12.1.0, 13.1.0, and 13.2.0.
Who can exploit CVE-2017-10091?
CVE-2017-10091 can be exploited by a low privileged attacker with network access via HTTP.
How do I fix CVE-2017-10091?
To fix CVE-2017-10091, apply the latest security patches provided by Oracle for the affected versions.
What type of vulnerability is CVE-2017-10091?
CVE-2017-10091 is a vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control.