« Volver al listado

CVE-2013-3816

Estado: ModificadaMedia (4)—

Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Oracle — Industry Applications

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3816",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-07-17T13:41:16.950",
  "references": [
    {
      "url": "http://osvdb.org/95302",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://secunia.com/advisories/54234",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1028797",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85689",
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://osvdb.org/95302",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54234",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1028797",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85689",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad sin especificar en el componente Oracle Policy Automation en Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2, permite a atacantes remotos comprometer la confidencialidad  a través de vectores no especificados relacionados con Determinations Engine."
    }
  ],
  "lastModified": "2026-06-16T23:55:50.623",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:industry_applications:10.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3128B11F-744F-4902-9D26-228720857DB1"
            },
            {
              "criteria": "cpe:2.3:a:oracle:industry_applications:10.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D6A48AF-017A-46C9-9763-55FAE71CC45C"
            },
            {
              "criteria": "cpe:2.3:a:oracle:industry_applications:10.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6F2DAED-3184-4838-98CE-2C3FDF5C6E60"
            },
            {
              "criteria": "cpe:2.3:a:oracle:industry_applications:10.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9FAB9F1-1E3C-4386-A8C7-98115F5CAC1D"
            },
            {
              "criteria": "cpe:2.3:a:oracle:industry_applications:10.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8165804F-C28B-4C96-A880-E41EA2E6FCB2"
            },
            {
              "criteria": "cpe:2.3:a:oracle:industry_applications:10.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AC66C46-B3B0-4631-9D59-9FCBD8E8F370"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com"
}