Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-2390 | First vendor Publication | 2010-10-13 |
| Vendor | Cve | Last vendor Modification | 2010-11-11 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2390 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 | |
| Application | 2 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 70063 | Oracle Multiple Products EM Console HTTP Request Handling Remote Overflow Oracle Database Server, Fusion Middleware and Enterprise Manager Grid Control are prone to an overflow condition. The EM Console component fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted request, a remote attacker can potentially execute arbitrary code. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-11-18 | Name : The remote database server is affected by multiple vulnerabilities. File : oracle_rdbms_cpu_oct_2010.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|---|
| CERT | http://www.us-cert.gov/cas/techalerts/TA10-287A.html |
| CONFIRM | http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 12:11:41 |
|
| 2021-04-22 01:12:19 |
|
| 2020-05-23 00:26:01 |
|
| 2015-10-18 17:22:15 |
|
| 2014-02-17 10:56:04 |
|
| 2013-11-11 12:38:48 |
|
| 2013-05-10 23:27:36 |
|
