Unscored severity · published Jul 17, 2013
CVE-2013-3758
Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to Schema Management.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager · Oracle
10.2.0.5; 11.1.0.1 · source: NVD
EM
Enterprise Manager Database Control · Oracle
10.2.0.4; 10.2.0.5; 11.1.0.7; 11.2.0.2; 11.2.0.3 · source: NVD
EM
Enterprise Manager Plugin For Database Control · Oracle
12.1.0.2; 12.1.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3758
osvdb.org
http://osvdb.org/95278
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
www.securityfocus.com
http://www.securityfocus.com/bid/61205
www.securitytracker.com
http://www.securitytracker.com/id/1028795
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/85665
More from Enterprise Manager
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
8.3
CVE-2024-20916
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management)
7.5
CVE-2019-2895
Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins)
7.5
CVE-2018-11040
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON…
7.3
CVE-2021-2008
Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin)