Detections
Analytics
Oracle Enterprise Manager Agent Unspecified Vulnerabilities (October 2015 CPU)
medium Nessus Plugin ID 86574
Language:
Synopsis
The remote host has an enterprise management application installed that is affected by multiple vulnerabilities.Description
The version of Oracle Enterprise Manager Agent installed on the remote host is affected by multiple vulnerabilities :- An unspecified vulnerability exists in the Agent Next Gen subcomponent that a remote attacker can exploit to impact confidentiality and integrity. No other details are available. (CVE-2015-4859)
- An unspecified vulnerability exists in the Agent Next Gen subcomponent that a local attacker can exploit to impact confidentiality, integrity, and availability. No other details are available. (CVE-2015-4874)
- An unspecified vulnerability exists in the Agent Next Gen subcomponent that a remote attacker can exploit to impact availability. No other details are available.
(CVE-2015-4875)
Solution
Apply the appropriate patch according to the October 2015 Oracle Critical Patch Update advisory.See Also
Plugin Details
Severity: Medium
ID: 86574
File Name: oracle_enterprise_manager_oct_2015_cpu.nasl
Version: 1.8
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 10/23/2015
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 4.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N
Vulnerability Information
CPE: cpe:/a:oracle:enterprise_manager
Required KB Items: installed_sw/Oracle Enterprise Manager Agent
Exploit Ease: No known exploits are available
Patch Publication Date: 10/20/2015
Vulnerability Publication Date: 10/20/2015