CVE-2015-0370

Опубликовано: 21 янв. 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2013-5858.

Ссылки

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/72171
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031572
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100072
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/72171
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031572
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100072

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:11.2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:database_server:12.1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00273

Низкий

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-crhp-h4x5-h8gg

github

больше 3 лет назад