NVD

Id
39473  
Name
CVE-2013-3749  
Description
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging. NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to storage of credentials in the (1) FND_LOG_MESSAGES database table or (2) log files by "native login pages."  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-07-17  
Modified Date
2013-12-19  
Seq
2013-3749  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201153 39473 CVE-2013-3749 VU#826463  View
201154 39473 CVE-2013-3749 http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html  View
201155 39473 CVE-2013-3749 61268  View
201156 39473 CVE-2013-3749 1028799  View
201157 39473 CVE-2013-3749 oracle-cpujuly2013-cve20133749(85673)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21808 JVNDB-2013-003383 Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性 Oracle E-Business Suite の Oracle Application Object Library には、Logging に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2013-3749 63691 CVE-2013-3749 39473 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003383.html 2013-07-16 2013-09-06 View