CVE-2015-2647

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-07-16 · updated 2026-06-17

Description

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1; EM Plugin for DB 12.1.0.5, 12.1.0.6, 12.1.0.7; and EM DB Control 11.1.0.7, 11.2.0.3, and 11.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Management.

Affected products

Oracle Enterprise Manager Database Control: 11.1.0.7, 11.2.0.3, 11.2.0.4
Oracle Enterprise Manager Grid Control: 11.1.0.1
Oracle Enterprise Manager Plugin For Database Control: 12.1.0.5, 12.1.0.6, 12.1.0.7

References

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
http://www.securitytracker.com/id/1032918
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00003.html
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
http://www.securitytracker.com/id/1032918

Get alerted when CVE-2015-2647 or the next vulnerability affects your stack