Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/07/2008 Updated: 11/10/2018

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a cross-site scripting (XSS) issue that allows remote malicious users to inject arbitrary web script or HTML via the REFRESHCHOICE parameter in multiple web pages.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle enterprise manager 10.1.0.5
oracle enterprise manager 10.2.0.4
oracle enterprise manager 11.1.0.6

NVD-CWE-noinfo http://secunia.com/advisories/31087 http://www.securitytracker.com/id?1020499 http://www.securitytracker.com/id?1020496 http://secunia.com/advisories/31113 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 http://www.vupen.com/english/advisories/2008/2115 http://www.vupen.com/english/advisories/2008/2109/references http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html http://www.securityfocus.com/archive/1/495093/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-2603

Vulnerability Summary

References

Vulmon Search

About

Products

Connect