CVE-2011-3525

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://osvdb.org/76516
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/50197
https://exchange.xforce.ibmcloud.com/vulnerabilities/70799
http://osvdb.org/76516
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/50197
https://exchange.xforce.ibmcloud.com/vulnerabilities/70799

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:database_server:3.2:::::::*
	cpe:2.3:a:oracle:database_server:4.0:::::::*

History

21 Nov 2024, 01:30

Type	Values Removed	Values Added
References	~~() http://osvdb.org/76516 -~~	() http://osvdb.org/76516 -
References	~~() http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html - Patch, Vendor Advisory~~	() http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/50197 -~~	() http://www.securityfocus.com/bid/50197 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/70799 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/70799 -

Information

Published : 2011-10-18 22:55

Updated : 2024-11-21 01:30

NVD link : CVE-2011-3525

Mitre link : CVE-2011-3525

CVE.ORG link : CVE-2011-3525

JSON object : View

Products Affected

oracle

database_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2011-3525", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-10-18T22:55:03.887", "references": [{"url": "http://osvdb.org/76516", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/50197", "source": "secalert_us@oracle.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/70799", "source": "secalert_us@oracle.com"}, {"url": "http://osvdb.org/76516", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/50197", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/70799", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server v3.2 y v4.0 permite a usuarios autenticados de forma remota afectar a la confidencialidad, integridad y disponibilidad, relacionado con un usuario desarrollador APEX."}], "lastModified": "2024-11-21T01:30:39.583", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:database_server:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90C437A2-779F-434F-A4EF-54E18934163F"}, {"criteria": "cpe:2.3:a:oracle:database_server:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97CF0BC9-DF56-442B-B475-A06B3725040E"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}