CVE-2013-0397: Medium severity oracle e-business suite vulnerability

Published Jan 17, 2013

Updated

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics.

Affected Software

3 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.3

Event History

Jan 17, 2013

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0397?

CVE-2013-0397 is considered a serious vulnerability as it can affect the confidentiality and integrity of data in Oracle E-Business Suite.

How do I fix CVE-2013-0397?

To mitigate CVE-2013-0397, it is recommended to apply the latest security patches provided by Oracle for affected versions of E-Business Suite.

Which versions of Oracle E-Business Suite are affected by CVE-2013-0397?

CVE-2013-0397 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, and 12.1.3.

What type of attack does CVE-2013-0397 allow?

CVE-2013-0397 allows remote attackers to potentially compromise confidentiality and integrity via unknown vectors.

Is there a workaround for CVE-2013-0397?

Currently, the best approach for CVE-2013-0397 is to update to the latest Oracle patches as there are no known effective workarounds.