CVE-2013-0380: Medium severity oracle e-business suite vulnerability

Published Jan 17, 2013

Updated

Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to View Payslip.

Affected Software

5 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Event History

Jan 17, 2013

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0380?

CVE-2013-0380 has a critical severity rating as it affects the integrity of Oracle Payroll in various versions of Oracle E-Business Suite.

How do I fix CVE-2013-0380?

To fix CVE-2013-0380, apply the latest security patch provided by Oracle for your affected version of the E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2013-0380?

CVE-2013-0380 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3.

What type of attack does CVE-2013-0380 facilitate?

CVE-2013-0380 allows remote attackers to affect the integrity of the payroll system via unknown vectors.

Is there any workaround for CVE-2013-0380?

There are no known workarounds for CVE-2013-0380; the recommended action is to apply the security patch from Oracle.