3.5

CVE-2013-3749

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging.  NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to storage of credentials in the (1) FND_LOG_MESSAGES database table or (2) log files by "native login pages."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ E-business Suite Version11.5.10.2
Oracle ≫ E-business Suite Version12.0.6
Oracle ≫ E-business Suite Version12.1.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.96% 0.777
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
Vendor Advisory
http://secunia.com/advisories/54222
http://www.securitytracker.com/id/1028799
http://osvdb.org/95286
http://www.kb.cert.org/vuls/id/826463
US Government Resource
http://www.securityfocus.com/bid/61268
https://exchange.xforce.ibmcloud.com/vulnerabilities/85673