CVE-2013-3791 - Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0

CVE-2013-3791

Summary

Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.

References

Vulnerable Configurations

cpe:2.3:a:oracle:enterprise_manager:10.2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager:10.2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_database_control:11.1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_grid_control:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_grid_control:*:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 29-08-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	61213
confirm	http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
jvn	JVN#26103805
jvndb	JVNDB-2013-003391
osvdb	95279
sectrack	1028795
xf	oracle-cpujuly2013-cve20133791(85666)

Last major update

29-08-2017 - 01:33

Published

17-07-2013 - 13:41

Last modified

29-08-2017 - 01:33