Unscored severity · published Oct 10, 2013
CVE-2013-0577
The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and…
–
CVSS
0.6%
EPSS
No
On KEV
Description
The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or delete documents or scripts via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
Infosphere Optim Data Growth For Oracle E-business Suite · Ibm
6.0; 6.1; 6.3.1; 6.3.2; 6.3.3; 6.4.0; +12 more · source: NVD
Affected product
IO
Infosphere Optim Data Growth For Oracle E-business Suite
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0577
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0577
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21651990
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/83329
More from Infosphere Optim Data Growth For Oracle E-business Suite
–
CVE-2013-0580
Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated…
–
CVE-2013-0579
The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to…
–
CVE-2013-2959
The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login…
–
CVE-2013-2957
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to…
–
CVE-2013-2956
SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute…