CVE-2011-2248

MEDIUM

Description

Unspecified vulnerability in the SQL Performance Advisories/UIs component in Oracle Database Server 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality, integrity, and availability, related to SQL Details UI & Explain Plan.

References

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

http://www.us-cert.gov/cas/techalerts/TA11-201A.html

Details

Source: MITRE

Published: 2011-07-20

Updated: 2011-10-05

Risk Information

CVSS v2.0

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM