Unscored severity · published Oct 15, 2014
CVE-2014-6488
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control:…
–
CVSS
1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4 EM Plugin for DB: 12.1.0.4, 12.1.0.5, and 12.1.0.6 allows remote authenticated users to affect integrity via unknown vectors related to Content Management.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager Database Control · Oracle
11.1.0.7; 11.2.0.3; 11.2.0.4 · source: NVD
EM
Enterprise Manager Grid Control · Oracle
10.2.0.5; 11.1.0.1; 12.1.0.4; 12.1.0.5; 12.1.0.6 · source: NVD
Affected product
EM
Enterprise Manager Database Control
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6488
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6488
secunia.com
http://secunia.com/advisories/61727
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
www.securityfocus.com
http://www.securityfocus.com/bid/70506
www.securitytracker.com
http://www.securitytracker.com/id/1031041
More from Enterprise Manager Database Control
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
–
CVE-2015-4735
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3…
–
CVE-2015-2647
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5,…
–
CVE-2015-2646
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5,…
–
CVE-2013-5828
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control…