CVE-2011-2244

medium
Published 2011-07-20 ยท Modified 2026-04-29
CVSS v3
โ€”
CVSS v4 NEW
โ€”
not yet in upstream
VIR risk
6.4

Description

Unspecified vulnerability in the Security Framework component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2; and Enterprise Manager Grid Control 10.1.0.6, 10.2.0.5, and 11.1.0.1; allows remote attackers to affect confidentiality and integrity via unknown vectors related to Authentication.

Predictions

Exploit likelihood
20%
Patch ETA
โ€”

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or โ€” if you've already worked around this in production โ€” publish your fix to the community-verified tier.

โœš Propose a mitigation on Community โ†’ Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact

VendorProductVersionsFixed
oracle oracledatabase_server10.1.0.5
oracle oracledatabase_server10.2.0.3
oracle oracledatabase_server10.2.0.4
oracle oracledatabase_server10.2.0.5
oracle oracledatabase_server11.1.0.7
oracle oracledatabase_server11.2.0.1
oracle oracledatabase_server11.2.0.2
oracle oracleenterprise_manager_grid_control10.1.0.6
oracle oracleenterprise_manager_grid_control10.2.0.5
oracle oracleenterprise_manager_grid_control11.1.0.1

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.