PT-2013-4588 · Oracle · Oracle E-Business Suite

Published 2013-07-17 · Updated 2013-08-22 · CVE-2013-3747

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3

Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Client System Analyzer.

Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.0.6, update to a version that includes the fix for this issue. For Oracle E-Business Suite version 12.1.3, update to a version that includes the fix for this issue.

Fix

Related Identifiers

CVE-2013-3747

Affected Products

Oracle E-Business Suite

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-3747 · Security Note
• http://oracle.com/technetwork/topics/security/cpujuly2013-1899826.html · Vendor Advisory
• http://securitytracker.com/id/1028799 · Note
• http://secunia.com/advisories/54222 · Note