CVE-2014-6557

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:N
oracleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
oracleenterprise_manager_grid_control
𝑥
≤ 12.1.0.5
oracleenterprise_manager_grid_control
12.1.0.1
oracleenterprise_manager_grid_control
12.1.0.2
oracleenterprise_manager_grid_control
12.1.0.3
oracleenterprise_manager_grid_control
12.1.0.4
𝑥
= Vulnerable software versions
References
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
http://www.securityfocus.com/bid/70512
http://www.securitytracker.com/id/1031041
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
http://www.securityfocus.com/bid/70512
http://www.securitytracker.com/id/1031041