Lucene search

K
cveOracleCVE-2013-3836
HistoryOct 16, 2013 - 3:55 p.m.

CVE-2013-3836

2013-10-1615:55:33
oracle
web.nvd.nist.gov
27
oracle
web cache
fusion middleware
cve-2013-3836
vulnerability
confidentiality
esi
partial page caching

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.2

Confidence

Low

EPSS

0.001

Percentile

36.1%

Unspecified vulnerability in the Oracle Web Cache component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to ESI/Partial Page Caching.

Affected configurations

Nvd
Node
oraclefusion_middlewareMatch11.1.1.6.0
OR
oraclefusion_middlewareMatch11.1.1.7.0
VendorProductVersionCPE
oraclefusion_middleware11.1.1.6.0cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*
oraclefusion_middleware11.1.1.7.0cpe:2.3:a:oracle:fusion_middleware:11.1.1.7.0:*:*:*:*:*:*:*

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.2

Confidence

Low

EPSS

0.001

Percentile

36.1%