QwikSec

Security Database

CVE

CWE

Training

CVE-2010-3594

Published: Jan 19, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

Unspecified vulnerability in the Real User Experience Insight component in Oracle Enterprise Manager Grid Control 6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Processing. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that this is SQL injection in rsynclogdird involving improper escaping of UTF-8 characters while processing log files.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_SECUNIA

oracle-real-user-sql-injection(64779)

vdb-entry

x_refsource_XF

http://www.zerodayinitiative.com/advisories/ZDI-11-016/

x_refsource_MISC

http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.