CVE

Id
63717  
CVE No.
CVE-2013-3770  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is related to "iDoc script injection" in the (1) cs and (2) urm components, which allows attackers to read "sensitive" files, as demonstrated by obtaining the "AES encryption key and encrypted credentials" of the weblogic user.  
Phase
Assigned (20130603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
630587 63717 CVE-2013-3770 IDEFENSE:20130716 Oracle WebCenter Content iDoc Injection Vulnerability  View
630588 63717 CVE-2013-3770 URL:http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1038  View
630589 63717 CVE-2013-3770 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
630590 63717 CVE-2013-3770 BID:61228  View
630591 63717 CVE-2013-3770 URL:http://www.securityfocus.com/bid/61228  View
630592 63717 CVE-2013-3770 OSVDB:95271  View
630593 63717 CVE-2013-3770 URL:http://osvdb.org/95271  View
630594 63717 CVE-2013-3770 SECTRACK:1028801  View
630595 63717 CVE-2013-3770 URL:http://www.securitytracker.com/id/1028801  View
630596 63717 CVE-2013-3770 SECUNIA:54227  View
630597 63717 CVE-2013-3770 URL:http://secunia.com/advisories/54227  View
630598 63717 CVE-2013-3770 XF:oracle-cpujuly2013-cve20133770(85658)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21836 JVNDB-2013-003411 Oracle iLearning における Learner Pages に関する脆弱性 Oracle iLearning には、Learner Pages に関する処理に不備があるため、完全性に影響のある脆弱性が存在します CVE-2013-3775 63717 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003411.html  View