Enterprise Manager Database Control vulnerabilities

Product

Enterprise Manager Database Control

by Oracle · last CVE Jul 16, 2015

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities30 In the news0 Timeline

Severity mix

Critical 1High 0Medium 0Low 0

Severity

All severities30 Critical1 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Enterprise Manager Database Control to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2004-1363	9.8	9%	Aug 4	Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check… Affected: 10.1.2
CVE-2015-4735	–	3%	Jul 16	Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3… Affected: 11.2.0.3; 11.2.0.4
CVE-2015-2647	–	2%	Jul 16	Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5,… Affected: 11.1.0.7; 11.2.0.3; 11.2.0.4
CVE-2015-2646	–	2%	Jul 16	Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 11.1.0.1; EM Plugin for DB: 12.1.0.5,… Affected: 11.1.0.7; 11.2.0.3; 11.2.0.4
CVE-2014-6488	–	1%	Oct 15	Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control:… Affected: 11.1.0.7; 11.2.0.3; 11.2.0.4
CVE-2013-5828	–	1%	Oct 16	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-5827	–	1%	Oct 16	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-5766	–	1%	Oct 16	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-3762	–	1%	Oct 16	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-3791	–	1%	Jul 17	Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect… Affected: 11.1.0.7
CVE-2013-3758	–	1%	Jul 17	Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for… Affected: 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0374	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 10.2.0.3; 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0373	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 10.2.0.3; 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0372	–	2%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0358	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 10.2.0.3; 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0355	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0354	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7,… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0353	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2013-0352	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 10.2.0.3; 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2012-5062	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 10.2.0.3,… Affected: 10.2.0.3; 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2012-3219	–	1%	Jan 17	Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control… Affected: 10.2.0.3; 10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3
CVE-2004-1367	–	7%	Aug 4	Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the… Affected: 10.1.2
CVE-2004-1366	–	15%	Aug 4	Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA… Affected: 10.1.2
CVE-2004-1365	–	7%	Aug 4	Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user Affected: 10.1.2
CVE-2004-1362	–	9%	Aug 4	The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which… Affected: 10.1.2
CVE-2004-1364	–	14%	Aug 4	Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory Affected: 10.1.2
CVE-2004-1371	–	11%	Aug 4	Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure Affected: 10.1.2
CVE-2004-1370	–	4%	Aug 4	Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain… Affected: 10.1.2
CVE-2004-1369	–	6%	Aug 4	The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used… Affected: 10.1.2
CVE-2004-1368	–	6%	Aug 4	ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script Affected: 10.1.2