Unscored severity · published Oct 16, 2013
CVE-2013-3827
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware…
–
CVSS
32.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
Exploitation
Is it being used?
Exploit prediction (EPSS)32.4% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FM
Fusion Middleware · Oracle
2.1.1; 3.0.1; 3.1.2; 10.3.6; 11.1.2.3.0; 11.1.2.4.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3827
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3827
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-0029.html
US Government Resource
http://www.kb.cert.org/vuls/id/526012
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
www.securityfocus.com
http://www.securityfocus.com/bid/63052
www.securitytracker.com
http://www.securitytracker.com/id/1029190
More from Fusion Middleware
9.8
CVE-2025-61757
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
9.8
CVE-2021-35587
Oracle Fusion Middleware Unspecified Vulnerability
9.8
CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability
9.8
CVE-2012-1710
Oracle Fusion Middleware Unspecified Vulnerability
9.1
CVE-2012-3152
Oracle Fusion Middleware Unspecified Vulnerability