Unscored severity · published Jan 19, 2011
CVE-2010-3594
Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Processing. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this is SQL injection in rsynclogdird involving improper escaping of UTF-8 characters while processing log files.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager Grid Control · Oracle
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3594
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3594
Vendor Advisory
http://secunia.com/advisories/42973
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
www.securityfocus.com
http://www.securityfocus.com/bid/45874
www.securitytracker.com
http://www.securitytracker.com/id?1024979
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0140
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-11-016/
More from Enterprise Manager Grid Control
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
–
CVE-2016-0481
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect…
–
CVE-2016-0476
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect…
–
CVE-2016-0455
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users…
–
CVE-2016-0449
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users…