CVE-2015-0476 Unspecified vulnerability in the SQL Trace Analyzer component in Oracle Support Tools before 12.1.11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

MediumCVSS 5.5 EPSS 1.4%

Published: 2015-04-16 19:00
Updated: 2026-06-17 03:20
Exploit status: No public exploit known

Description

Unspecified vulnerability in the SQL Trace Analyzer component in Oracle Support Tools before 12.1.11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Affected products

Product	Affected versions	Fixed in
oracle sql trace analyzer	<= 12.1.10	No fix listed

References

www.oracle.com vendor-advisory

CVSS v2.0

5.5 Medium

AV:N/AC:L/Au:S/C:P/I:P/A:N

Access Vector: Network
Access Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.41% (percentile 73.0)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.