CVE-2015-4735
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.
Vulnerabilidad no especificada en el componente Enterprise Manager for Oracle Database en Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 y EM DB Control 11.2.0.3 y 11.2.0.4, permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con RAC Management.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-06-24 CVE Reserved
- 2015-07-16 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1032918 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html | 2016-12-28 |
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html | 2016-12-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Oracle Search vendor "Oracle" | Enterprise Manager Database Control Search vendor "Oracle" for product "Enterprise Manager Database Control" | 11.2.0.3 Search vendor "Oracle" for product "Enterprise Manager Database Control" and version "11.2.0.3" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Enterprise Manager Database Control Search vendor "Oracle" for product "Enterprise Manager Database Control" | 11.2.0.4 Search vendor "Oracle" for product "Enterprise Manager Database Control" and version "11.2.0.4" | - |
Affected
| ||||||
| Oracle Search vendor "Oracle" | Enterprise Manager Grid Control Search vendor "Oracle" for product "Enterprise Manager Grid Control" | 11.1.0.1 Search vendor "Oracle" for product "Enterprise Manager Grid Control" and version "11.1.0.1" | - |
Affected
| ||||||