WaratekVRT Sign in

Medium Enterprise Manager CVEs

122 CVEs, 1 exploited, 9 protected by Waratek

Reset
More filters (1)
Columns
Product enterprise manager✕
Overview 122 matches · 9 protected · 1 exploited · 0 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5
122matches 9protected7.4% 1exploited0.8% 0CISA KEV0.0% 2public PoC1.6% 1EPSS ≥ 0.50.8%
Protected by Waratek 9 7.4% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 113 92.6%
Critical 0 0.0% High 0 0.0% Medium 122 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 9 7.4% partly blocked 0 0.0% not blocked 113 92.6% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 0.8% Working exploit published 1 0.8% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 120 98.4%
split by peak 40 / year
No exploit published: 113Protected by Waratek: 9 Medium: 122 not blocked: 113blocked by ARMR today: 9 No public exploit: 120Working exploit published: 1Exploited: 1
20041 No exploit published1 Medium1 not blocked1 No public exploit1 20050 20062 No exploit published2 Medium2 not blocked2 No public exploit2 20071 No exploit published1 Medium1 not blocked1 No public exploit1 20080 20091 No exploit published1 Medium1 not blocked1 No public exploit1 20101 No exploit published1 Medium1 not blocked1 No public exploit1 20112 Protected by Waratek1 No exploit published1 Medium2 blocked by ARMR today1 not blocked1 No public exploit2 20120 201318 No exploit published18 Medium18 not blocked18 No public exploit18 20141 No exploit published1 Medium1 not blocked1 No public exploit1 20159 No exploit published9 Medium9 not blocked9 No public exploit9 201618 Protected by Waratek2 No exploit published16 Medium18 blocked by ARMR today2 not blocked16 No public exploit18 20171 No exploit published1 Medium1 not blocked1 No public exploit1 20185 Protected by Waratek1 No exploit published4 Medium5 blocked by ARMR today1 not blocked4 Working exploit published1 No public exploit4 20198 Protected by Waratek2 No exploit published6 Medium8 blocked by ARMR today2 not blocked6 No public exploit8 202040 Protected by Waratek1 No exploit published39 Medium40 blocked by ARMR today1 not blocked39 No public exploit40 20213 Protected by Waratek1 No exploit published2 Medium3 blocked by ARMR today1 not blocked2 Exploited1 No public exploit2 20222 Protected by Waratek1 No exploit published1 Medium2 blocked by ARMR today1 not blocked1 No public exploit2 20230 20240 20250 20269 No exploit published9 Medium9 not blocked9 No public exploit9
200420062008201020122014201620182020202220242026
122 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2013-3791 Medium 2013-07-17 No exploit published No public exploit Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.
CVE-2013-3758 Medium 2013-07-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to Schema Management.
CVE-2013-0396 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0360.
CVE-2013-0374 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Database Cloning.
CVE-2013-0373 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.
CVE-2013-0372 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1 and 12.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.
CVE-2013-0360 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Application Performance Management (APM) component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than CVE-2013-0396.
CVE-2013-0358 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Resource Manager.
CVE-2013-0355 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Distributed/Cross DB Features.
CVE-2013-0354 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to Policy Framework.
CVE-2013-0353 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 allows remote attackers to affect integrity via unknown vectors related to Enterprise Configuration Management.
CVE-2013-0352 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Content Management.
CVE-2012-5062 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.
CVE-2012-3219 Medium 2013-01-17 No exploit published No public exploit Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Storage Management.
CVE-2011-0845 Medium 2011-07-20 No exploit published No public exploit Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2010-3594 Medium 2011-01-19 Protected by Waratek No public exploit Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Processing. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this is SQL injection in rsynclogdird involving improper escaping of UTF-8 characters while processing log files.
CVE-2010-2373 Medium 2010-07-13 No exploit published No public exploit Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors.
CVE-2008-5447 Medium 2009-01-14 No exploit published No public exploit Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2007-0293 Medium 2007-01-17 No exploit published No public exploit Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent (EM03) and (2) EM04 and (3) EM05 in Enterprise Manager Console. NOTE: EM05 might be related to CVE-2007-0222.
CVE-2006-3720 Medium 2006-07-21 No exploit published No public exploit Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02.
CVE-2006-3719 Medium 2006-07-21 No exploit published No public exploit Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.
CVE-2004-1366 Medium 2004-08-04 No exploit published No public exploit Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
‹ prev page 2 of 2 next ›