Vulnerability Details : CVE-2013-3827
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
Products affected by CVE-2013-3827
- cpe:2.3:a:oracle:fusion_middleware:12.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:10.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:11.1.2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:11.1.2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:12.1.2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:2.1.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-3827
93.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-3827
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2013-3827
-
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
Oracle Critical Patch Update - October 2013Vendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2014-0029.html
RHSA-2014:0029 - Security Advisory - Red Hat Customer Portal
-
http://www.securitytracker.com/id/1029190
Oracle Fusion Middleware Flaws Let Remote Users Deny Service and Partially Access and Modify Data - SecurityTracker
-
http://www.securityfocus.com/bid/63052
Oracle JavaServer Faces CVE-2013-3827 Multiple Directory Traversal Vulnerabilities
-
http://www.kb.cert.org/vuls/id/526012
VU#526012 - Oracle JavaServer Faces contains multiple vulnerabilitiesUS Government Resource
Jump to