Unscored severity · published Oct 15, 2014
CVE-2014-6557
Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to…
–
CVSS
1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager Grid Control · Oracle
through 12.1.0.5; 12.1.0.1; 12.1.0.2; 12.1.0.3; 12.1.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6557
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6557
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
www.securityfocus.com
http://www.securityfocus.com/bid/70512
www.securitytracker.com
http://www.securitytracker.com/id/1031041
More from Enterprise Manager Grid Control
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
–
CVE-2016-0481
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect…
–
CVE-2016-0476
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect…
–
CVE-2016-0455
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users…
–
CVE-2016-0449
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users…