5.5

CVE-2013-3770

EPSS 0.25%
Published 17.07.2013 13:41:16
Last modified 11.04.2025 00:51:21
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server.  NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is related to "iDoc script injection" in the (1) cs and (2) urm components, which allows attackers to read "sensitive" files, as demonstrated by obtaining the "AES encryption key and encrypted credentials" of the weblogic user.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Fusion Middleware Version10.1.3.5.1

Oracle ≫ Fusion Middleware Version11.1.1.6.0

Oracle ≫ Fusion Middleware Version11.1.1.7.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.25%	0.458

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	8	4.9	AV:N/AC:L/Au:S/C:P/I:P/A:N

http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

Vendor Advisory

http://www.securitytracker.com/id/1028801

http://secunia.com/advisories/54227

http://osvdb.org/95271

http://www.securityfocus.com/bid/61228

http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1038

https://exchange.xforce.ibmcloud.com/vulnerabilities/85658

https://nvd.nist.gov/vuln/detail/CVE-2013-3770

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-3770

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-3770

EUVD