CVE-2013-5837

Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Cognos.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:S/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html	Vendor Advisory
http://www.securityfocus.com/bid/63081
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html	Vendor Advisory
http://www.securityfocus.com/bid/63081

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:industry_applications:4.6:sp0::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp0a::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp0b::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp0c::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp1::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp1a::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp1b::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp1c::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp2::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp2a::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp2b::::::
	cpe:2.3:a:oracle:industry_applications:4.6:sp2c::::::
	cpe:2.3:a:oracle:industry_applications:5.0:sp0::::::
	cpe:2.3:a:oracle:industry_applications:5.0:sp0a::::::
	cpe:2.3:a:oracle:industry_applications:5.0:sp1::::::
	cpe:2.3:a:oracle:industry_applications:5.0:sp1a::::::
	cpe:2.3:a:oracle:industry_applications:5.0:sp1b::::::
	cpe:2.3:a:oracle:industry_applications:5.0.3:::::::*
	cpe:2.3:a:oracle:industry_applications:5.0.4:::::::*

History

No history.

Information

Published : 2013-10-16 17:55

Updated : 2025-04-11 00:51

NVD link : CVE-2013-5837

Mitre link : CVE-2013-5837

CVE.ORG link : CVE-2013-5837

JSON object : View

Products Affected

oracle

industry_applications

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-5837", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-16T17:55:05.943", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/63081", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/63081", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Health Sciences InForm component in Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, and 5.0.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Cognos."}, {"lang": "es", "value": "Vulnerabilidad sin especificar en el componente Oracle Health Sciences InForm en Oracle Industry Applications 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.0.3, y 5.0.4 permite a usuarios remotos autenticados afectar a la confidencialidad a trav\u00e9s de vectores desconocidos relacionados con Cognos."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp0:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFB19406-80FB-4D18-B445-1A3E194445B1"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp0a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B1A0F23-7783-41C5-BB06-83F23B6C7248"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp0b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C5E1651-62AA-4A41-8581-22502850C95B"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp0c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1DB3615-C594-47A1-9CE5-2DC9689FE1EF"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A1BD5FF-334E-4463-8D90-E2B9128177EC"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp1a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E01ED61-916A-43E3-8101-3AE70285B4C9"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp1b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "099C1F29-A893-43D0-B781-F6376784FC77"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp1c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EE76194-A139-4682-B3C3-E534DEB9699C"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75818D5D-6908-46B1-84B1-682EF39D23A5"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp2a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F165F3DC-7863-4ED9-A9E1-B531FA9DED7C"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp2b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACBE2353-CA79-4DB0-83CC-CA3CDAD64EA3"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:4.6:sp2c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56357E79-1A30-43DB-A23C-607F02D1F7F4"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0:sp0:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0352291-4417-418E-BB65-C0CBFEB47597"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0:sp0a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F0A363C-D521-4B86-B082-E2E78B67B72E"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E7D2B73-04D6-439F-B139-507BD64C56F7"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0:sp1a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D831460D-2C83-409D-99E3-FBF25B925ACF"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0:sp1b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "486CC7F5-2EA7-44D4-BD99-52484F484DC1"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22119266-C83E-4502-80D1-240DCAEA3060"}, {"criteria": "cpe:2.3:a:oracle:industry_applications:5.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D41FC89-990A-4418-B6BF-CBFA56938F5D"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}