CVE-2015-4735 Information disclosure in n/a
Remote attackers can exploit an unspecified vulnerability in Oracle Enterprise Manager to compromise data confidentiality via RAC Management vectors.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2015-4735?
CVE-2015-4735 is a medium-severity vulnerability in Oracle Enterprise Manager Grid Control, published on 16 Jul 2015. It can be exploited over the network.
Official description
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management.
Weakness: CWE-200
Which versions are affected by CVE-2015-4735?
It affects 2 products.
Products include Oracle Enterprise Manager Database Control, Oracle Enterprise Manager Grid Control.
How do I fix CVE-2015-4735?
Apply the vendor's patch.
Is CVE-2015-4735 being exploited?
There is no known exploitation of CVE-2015-4735 in the wild and no public exploit code.
Other vulnerabilities in Oracle Enterprise Manager Grid Control
Sources
Also known as GHSA-c3mp-xm82-4vr9.