CVE-2013-2959
Estado: ModificadaMedia (5)—
The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.17%
- Percentil entre todas las CVEs puntuadas: 66
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-255
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-2959",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-05-27T14:55:01.293",
"references": [
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21637444",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83668",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21637444",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83668",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-255"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network."
},
{
"lang": "es",
"value": "La consola en IBM InfoSphere Optim Data Growth para Oracle E-Business Suite v6.x, v7.x, y v9.x anterior a v9.1.0.3 no proporciona una sesión encriptada para transmitir las credenciales de inicio de sesión, lo que permite a atacantes remotos obtener información sensible capturando trafico en la red."
}
],
"lastModified": "2026-06-16T23:54:17.460",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CCFEBBA0-8682-45F5-B14C-F2413C78CA9C"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "042FA7EC-2756-4483-B1BC-C1CDA48E5E1B"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD5D4C6B-FB5F-4471-8D52-8DD5D2A531D7"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C96FD2F5-C3A3-4397-A628-AEB9C4CF9413"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5084C06B-25B3-4889-A850-366AC4F64178"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00B5CE9C-2F45-4CB9-AF05-25AEDC7DB0F3"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4F5D8D8-9BA0-454E-8298-C954CAC44556"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49A6675C-8467-4D81-A338-F3D943B9C4F5"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:6.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBF3064D-039C-4161-8B72-39EC7E5F677B"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA084A33-2CEE-4896-89C3-B30A219BAD91"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A45655F7-BBFD-41C6-A74D-5076FED0A213"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7FE90E6-8DAC-46EC-A79A-B640866884AE"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "157E4DB5-CEF7-446F-AACC-10B1B4EF7C97"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21992A6D-3178-49FE-8FDF-CC98CA09A551"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62EC9BD3-C64E-4B9F-8E72-2B39056F832A"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34E05B00-1740-42CD-A8D8-9F70749EF046"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:7.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB46D109-DFC4-4265-9CEB-33337A4F7361"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_optim_data_growth_for_oracle_e-business_suite:9.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F6FC629-2802-4A9A-96D2-DDCA045B47BB"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}