Enterprise Manager Grid Control
Vendor:
First CVE: Aug 4, 2004 · Active for 21 years
84
Total CVEs
More Total CVEs than 99% of tracked products
9.3
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
5.3
Avg CVSS
Higher Avg CVSS than 13% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Enterprise Manager Grid Control over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 4, 2004
21 years ago
Most Recent CVE
Jan 21, 2016
3,841 days ago
CVE Severity & Scoring
Enterprise Manager Grid Control84 CVEs
85%
11%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network1 (1.2%)
Unknown83 (98.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (1.2%)
High0 (0.0%)
Unknown83 (98.8%)
User Interaction
None1 (1.2%)
Unknown83 (98.8%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (1.2%)
Unknown83 (98.8%)
Top CVEs
Signals from CVEs in this product scope (84 CVEs).
84 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-3600HIGH Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attacke | Jan 19, 2011 | 7.5 | 80 | NO | YES |
CVE-2004-1364HIGH Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory. | Aug 4, 2004 | 8.5 | 37 | NO | YES |
CVE-2004-1363CRITICAL Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check | Aug 4, 2004 | 9.8 | 33 | NO | NO |
CVE-2004-1371HIGH Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure. | Aug 4, 2004 | 9.0 | 32 | NO | NO |
CVE-2006-1884HIGH Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# | Apr 20, 2006 | 10.0 | 26 | NO | NO |
CVE-2016-0481MEDIUM Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confid | Jan 21, 2016 | 5.0 | 23 | NO | NO |
CVE-2016-0476MEDIUM Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confid | Jan 21, 2016 | 5.0 | 23 | NO | NO |
CVE-2012-1737MEDIUM Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM | Jul 17, 2012 | 6.8 | 23 | NO | NO |
CVE-2011-0848MEDIUM Unspecified vulnerability in the Security Framework component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Oracle Enterpr | Jul 20, 2011 | 6.8 | 23 | NO | NO |
CVE-2011-0845MEDIUM Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and ava | Jul 20, 2011 | 6.8 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (84 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
1.2% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
2.4% of CVEs· 85th percentile
Social Chatter
Signals from CVEs in this product scope (84 CVEs).
Media Mentions
Signals from CVEs in this product scope (84 CVEs).
Top CNAs Publishing CVEs For Enterprise Manager Grid Control
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.5 | 3 | 5.8 | 1.2% | 0 | 0 |
| 6.0 | 1 | 6.4 | 2.3% | 0 | 0 |
| 12.5.0.2 | 3 | 4.7 | 15.1% | 0 | 0 |
| 12.4.0.2 | 3 | 4.7 | 15.1% | 0 | 0 |
| 12.2.2 | 1 | 3.6 | 1.2% | 0 | 0 |
| 12.1.4 | 1 | 4.3 | 1.0% | 0 | 0 |
| 12.1.0.6 | 3 | 3.8 | 1.4% | 0 | 0 |
| 12.1.0.5 | 14 | 4.6 | 1.0% | 0 | 0 |
| 12.1.0.4 | 15 | 4.6 | 0.9% | 0 | 0 |
| 12.1.0.3 | 3 | 4.7 | 1.1% | 0 | 0 |
| 12.1.0.2 | 5 | 5.8 | 1.4% | 0 | 0 |
| 12.1.0.1 | 4 | 4.9 | 1.6% | 0 | 0 |
| 11.2.0.4 | 8 | 4.3 | 0.5% | 0 | 0 |
| 11.1.3 | 1 | 4.3 | 1.0% | 0 | 0 |
| 11.1.0.1 | 34 | 4.8 | 1.2% | 0 | 0 |
| 11.1 | 3 | 5.8 | 1.2% | 0 | 0 |
| 10.2.0.5 | 33 | 5.0 | 3.6% | 0 | 1 |
| 10.2.0.1 | 1 | 10.0 | 3.8% | 0 | 0 |
| 10.1.0.6 | 19 | 5.7 | 1.6% | 0 | 0 |
| 10.1.0.4 | 1 | 10.0 | 3.8% | 0 | 0 |