Not rated
CVE-2017-3518 Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent:…
Description
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery Framework). Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager Base Platform. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Enterprise Manager Base Platform | 13.2.0 | No fix stated |
| Enterprise Manager Base Platform | 13.1.0 | No fix stated |
| Enterprise Manager Base Platform | 12.1.0 | No fix stated |
References
- www.oracle.com www.oracle.com
- 97720 www.securityfocus.com
- 1038297 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of Enterprise Manager Base Platform
The 53 CVEs of Enterprise Manager Base Platform →
CVE-2024-21067
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host…
8.8
High
CVE-2024-20917
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log…
7.5
High
CVE-2024-20916
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event…
8.3
High
CVE-2022-21623
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application…
7.5
High