CVE-2013-3749: Low severity oracle e-business suite vulnerability
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging. NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to storage of credentials in the (1) FNDLOGMESSAGES database table or (2) log files by "native login pages."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3749?
The severity of CVE-2013-3749 is considered to be moderate due to its potential impact on confidentiality in Oracle E-Business Suite.
How do I fix CVE-2013-3749?
To fix CVE-2013-3749, you should apply the latest security patches provided by Oracle for the affected versions of the E-Business Suite.
Who is affected by CVE-2013-3749?
CVE-2013-3749 affects users of Oracle E-Business Suite versions 11.5.10.2, 12.0.6, and 12.1.3.
Can CVE-2013-3749 be exploited remotely?
Yes, CVE-2013-3749 can be exploited by remote authenticated users affecting the confidentiality of the application.
When was CVE-2013-3749 disclosed?
CVE-2013-3749 was disclosed as part of the July 2013 Critical Patch Update by Oracle.