NVD

Id
14973  
Name
CVE-2010-3595  
Description
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-18  
Published
2011-01-19  
Modified Date
2013-08-28  
Seq
2010-3595  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
83262 14973 CVE-2010-3595 http://dsecrg.com/pages/vul/show.php?id=307  View
83263 14973 CVE-2010-3595 16056  View
83264 14973 CVE-2010-3595 http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html  View
83265 14973 CVE-2010-3595 20110125 [DSECRG-11-007] Oracle Document Capture ImportBodyText - read files  View
83266 14973 CVE-2010-3595 45849  View
83267 14973 CVE-2010-3595 1024981  View
83268 14973 CVE-2010-3595 ADV-2011-0143  View
83269 14973 CVE-2010-3595 oracle-document-importserver-info-disc(64770)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30811 JVNDB-2011-001050 Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性 Oracle Fusion Middleware の Oracle Document Capture コンポーネントには、Import Server に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2010-3595 46175 CVE-2010-3595 14973 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001050.html 2011-01-18 2011-02-10 View