Skip to main content

Oracle Products Multiple Vulnerabilies

Last Update Date: 18 Apr 2012 12:01 Release Date: 18 Apr 2012 5624 Views

RISK: High Risk

TYPE: Servers - Database Servers

TYPE: Database Servers

Multiple vulnerabilities have been identified in various Oracle products and components, which could be exploited by attackers to denial of service, data manipulation, disclose sensitive information or compromise a vulnerable system.


Impact

  • Denial of Service
  • Remote Code Execution
  • Information Disclosure

System / Technologies affected

  • Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3
  • Oracle Database 11g Release 1, version 11.1.0.7
  • Oracle Database 10g Release 2, versions 10.2.0.3, 10.2.0.4, 10.2.0.5
  • Oracle Application Server 10g Release 3, version 10.1.3.5.0
  • Oracle BI Publisher, versions 10.1.3.4.1, 10.1.3.4.2
  • Oracle DB UM Connector for Oracle Identity Manager, Version 9.1.0.4
  • Oracle Identity Manager 11g, versions 11.1.1.3, 11.1.1.5
  • Oracle JDeveloper, version 10.1.3.5.0
  • Oracle JRockit versions, R28.2.2 and earlier, R27.7.1 and earlier
  • Oracle Outside In Technology, versions 8.3.5, 8.3.7
  • Oracle WebCenter Forms Recognition, version 10.1.3.5
  • Enterprise Manager Grid Control 11g Release 1, version 11.1.0.1
  • Enterprise Manager Grid Control 10g Release 1, version 10.2.0.5
  • Oracle E-Business Suite Release 12, versions 12.0.4, 12.0.6, 12.1.1, 12.1.2, 12.1.3
  • Oracle E-Business Suite Release 11i, version 11.5.10.2
  • Oracle Agile, version 6.0.0
  • Oracle AutoVue version 20.0.2
  • Oracle PeopleSoft Enterprise CRM, version 9.1
  • Oracle PeopleSoft Enterprise HCM, version 9.1
  • Oracle PeopleSoft Enterprise HRMS, versions 8.9, 9.0, 9.1
  • Oracle PeopleSoft Enterprise FCSM, versions 9.0, 9.1
  • Oracle PeopleSoft Enterprise PeopleTools, versions 8.50, 8.51, 8.52
  • Oracle PeopleSoft Enterprise Portal version 9.1
  • Oracle PeopleSoft Enterprise SCM, versions 9.0, 9.1
  • Oracle Siebel Life Sciences, versions 8.0.0, 8.1.1, 8.2.2
  • Oracle FLEXCUBE Direct Banking, versions 5.0.2, 5.3.0-5.3.4, 6.0.1, 6.2.0
  • Oracle FLEXCUBE Universal Banking, versions 10.0.0-10.5.0, 11.0.0-11.4.0
  • Primavera P6 Enterprise Project Portfolio Management, versions 6.2.1, 8.0, 8.1, 8.2
  • Oracle Sun Product Suite
  • Oracle MySQL Server, versions 5.1, 5.5

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Apply Oracle Critical Patch Update - April 2012
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html


Vulnerability Identifier


Source


Related Link