Unscored severity · published May 27, 2013
CVE-2013-2959
The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
Infosphere Optim Data Growth For Oracle E-business Suite · Ibm
6.0; 6.1; 6.3.1; 6.3.2; 6.3.3; 6.4.0; +12 more · source: NVD
Affected product
IO
Infosphere Optim Data Growth For Oracle E-business Suite
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2959
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2959
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21637444
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/83668
More from Infosphere Optim Data Growth For Oracle E-business Suite
–
CVE-2013-0580
Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated…
–
CVE-2013-0579
The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to…
–
CVE-2013-0577
The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and…
–
CVE-2013-2957
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to…
–
CVE-2013-2956
SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute…