漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
Oracle Enterprise Manager Base Platform 输入验证错误漏洞
Vulnerability Description
Oracle Enterprise Manager Base Platform是美国甲骨文(Oracle)公司的一套本地管理平台。该平台主要用于管理Oracle产品部署。 Oracle Enterprise Manager 的 Enterprise Manager Base Platform 存在输入验证错误漏洞,该漏洞允许未经身份验证的攻击者通过 HTTP 进行网络访问,从而破坏 Enterprise Manager Base Platform。成功的攻击需要来自攻击者以外的其他人的人工交互,并且当漏洞
CVSS Information
N/A
Vulnerability Type
N/A