CVE-2013-3770: Medium severity oracle fusion middleware vulnerability
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is related to "iDoc script injection" in the (1) cs and (2) urm components, which allows attackers to read "sensitive" files, as demonstrated by obtaining the "AES encryption key and encrypted credentials" of the weblogic user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3770?
CVE-2013-3770 is considered a medium severity vulnerability due to its impact on confidentiality and integrity.
How do I fix CVE-2013-3770?
To fix CVE-2013-3770, apply the latest patches provided by Oracle for affected versions of Fusion Middleware.
Who is affected by CVE-2013-3770?
CVE-2013-3770 affects remote authenticated users of Oracle Fusion Middleware versions 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0.
What components are involved in CVE-2013-3770?
CVE-2013-3770 specifically involves the Oracle WebCenter Content component within Oracle Fusion Middleware.
What type of attacks can CVE-2013-3770 facilitate?
CVE-2013-3770 can facilitate attacks that affect the confidentiality and integrity of the content server.