CVE

Id
63696  
CVE No.
CVE-2013-3749  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging. NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to storage of credentials in the (1) FND_LOG_MESSAGES database table or (2) log files by "native login pages."  
Phase
Assigned (20130603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
630442 63696 CVE-2013-3749 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
630443 63696 CVE-2013-3749 CERT-VN:VU#826463  View
630444 63696 CVE-2013-3749 URL:http://www.kb.cert.org/vuls/id/826463  View
630445 63696 CVE-2013-3749 BID:61268  View
630446 63696 CVE-2013-3749 URL:http://www.securityfocus.com/bid/61268  View
630447 63696 CVE-2013-3749 OSVDB:95286  View
630448 63696 CVE-2013-3749 URL:http://osvdb.org/95286  View
630449 63696 CVE-2013-3749 SECTRACK:1028799  View
630450 63696 CVE-2013-3749 URL:http://www.securitytracker.com/id/1028799  View
630451 63696 CVE-2013-3749 SECUNIA:54222  View
630452 63696 CVE-2013-3749 URL:http://secunia.com/advisories/54222  View
630453 63696 CVE-2013-3749 XF:oracle-cpujuly2013-cve20133749(85673)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21827 JVNDB-2013-003402 Oracle and Sun Systems Products Suite の Solaris Cluster における HA for TimesTen に関する脆弱性 Oracle and Sun Systems Products Suite の Solaris Cluster には、HA for TimesTen に関する処理に不備があるため、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2013-3754 63696 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003402.html  View