Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM01 and (2) EM02.
https://exchange.xforce.ibmcloud.com/vulnerabilities/26056
http://www.vupen.com/english/advisories/2006/1571
http://www.vupen.com/english/advisories/2006/1397
http://www.securityfocus.com/bid/17590
http://www.securityfocus.com/archive/1/432267/100/0/threaded
http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html
http://www.kb.cert.org/vuls/id/443265
http://securitytracker.com/id?1015961