Unscored severity · published Jul 16, 2015
CVE-2015-4735
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager Database Control · Oracle
11.2.0.3; 11.2.0.4 · source: NVD
EM
Enterprise Manager Grid Control · Oracle
11.1.0.1 · source: NVD
Affected product
EM
Enterprise Manager Database Control
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4735
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4735
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html
Patch
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
Third Party Advisory
http://www.securitytracker.com/id/1032918
More from Enterprise Manager Database Control
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
–
CVE-2015-2647
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5,…
–
CVE-2015-2646
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5,…
–
CVE-2014-6488
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control:…
–
CVE-2013-5828
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control…