Unscored severity · published Jul 17, 2013
CVE-2013-3791
Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EM
Enterprise Manager · Oracle
10.2.0.5 · source: NVD
EM
Enterprise Manager Database Control · Oracle
11.1.0.7 · source: NVD
EM
Enterprise Manager Grid Control · Oracle
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3791
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3791
jvn.jp
http://jvn.jp/en/jp/JVN26103805/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2013-003391
osvdb.org
http://osvdb.org/95279
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
www.securityfocus.com
http://www.securityfocus.com/bid/61213
www.securitytracker.com
http://www.securitytracker.com/id/1028795
More from Enterprise Manager
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
8.3
CVE-2024-20916
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management)
7.5
CVE-2019-2895
Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins)
7.5
CVE-2018-11040
Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON…
7.3
CVE-2021-2008
Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin)