Unscored severity · published Jan 17, 2013
CVE-2013-0372
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager Database Control · Oracle
11.1.0.7; 11.2.0.2; 11.2.0.3 · source: NVD
EM
Enterprise Manager Grid Control · Oracle
11.1.0.1; 12.1.0.1 · source: NVD
EM
Enterprise Manager Plugin For Database Control · Oracle
12.1.0.2 · source: NVD
Affected product
EM
Enterprise Manager Database Control
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0372
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0372
marc.info
http://marc.info/?l=bugtraq&m=139344343412337&w=2
secunia.com
http://secunia.com/advisories/57126
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
www.securityfocus.com
http://www.securityfocus.com/bid/57378
More from Enterprise Manager Database Control
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
–
CVE-2015-4735
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3…
–
CVE-2015-2647
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5,…
–
CVE-2015-2646
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5,…
–
CVE-2014-6488
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control:…