CVE-2015-2647 Other in n/a
Remote authenticated users can compromise confidentiality and integrity in Oracle Enterprise Manager via unspecified Content Management vectors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-2647?
CVE-2015-2647 is a medium-severity vulnerability in Oracle Enterprise Manager Grid Control, published on 16 Jul 2015. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.
Which versions are affected by CVE-2015-2647?
It affects 3 products.
Products include Oracle Enterprise Manager Database Control, Oracle Enterprise Manager Grid Control, Oracle Enterprise Manager Plugin for Database Control.
How do I fix CVE-2015-2647?
Apply the vendor's patch.
Is CVE-2015-2647 being exploited?
There is no known exploitation of CVE-2015-2647 in the wild and no public exploit code.
Other vulnerabilities in Oracle Enterprise Manager Grid Control
Sources
Also known as GHSA-xwxw-ph5c-h3rg.