ID CVE-2013-5785
Summary Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.6, 11.1.1.7, and 11.1.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security and Authentication. Per: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html "Please refer to Doc ID My Oracle Support Note 1608683.1 for instructions on how to address this issue."
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:fusion_middleware:11.1.2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:fusion_middleware:11.1.2.1.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 28-01-2014 - 04:56)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid
  • 64758
  • 64819
confirm http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
osvdb 102111
sectrack 1029613
secunia 56465
Last major update 28-01-2014 - 04:56
Published 15-01-2014 - 16:11
Last modified 28-01-2014 - 04:56
Back to Top