CVE-2013-5890: Medium severity oracle e-business suite vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Exception Reporting.

Affected Software

6 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Oracle E-Business Suite=12.2.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

Event History

Jan 15, 2014

CVE Published

via MITRE·12:30 AM

Data Sourced

via MITRE·12:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5890?

CVE-2013-5890 has a medium severity rating, impacting confidentiality and integrity in the affected Oracle E-Business Suite versions.

What versions of Oracle E-Business Suite are affected by CVE-2013-5890?

CVE-2013-5890 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2.

Who can exploit the CVE-2013-5890 vulnerability?

CVE-2013-5890 can be exploited by remote authenticated users of the Oracle Payroll component.

How do I fix CVE-2013-5890?

To fix CVE-2013-5890, apply the latest security patches provided by Oracle for the affected versions of the E-Business Suite.

What are the potential impacts of CVE-2013-5890?

CVE-2013-5890 can lead to unauthorized access affecting the confidentiality and integrity of data handled by the Oracle Payroll component.