Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2013-1509 — Oracle Fusion Middleware vulnerability

6 documents5 sources
Severity
4.0MEDIUMNVD
EPSS
16.0%
top 5.21%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Oracle Fusion Middleware
Timeline
PublishedApr 17
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/fusion_middleware11.1.1.6.0, 11.1.1.6.1, 7.6.2+2

🔴Vulnerability Details

2
GHSA
GHSA-fmg5-j942-m8ww: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7↗2022-05-17
▶
CVEList
CVE-2013-1509: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7↗2013-04-17
▶

💥Exploits & PoCs

1
Exploit-DB
Oracle WebCenter Sites Satellite Server - HTTP Header Injection↗2013-04-18
▶

💬Community

2
Bugzilla
CVE-2013-5843 Oracle JDK: unspecified vulnerability fixed in 7u45 (2D)↗2013-10-16
▶
Bugzilla
CVE-2013-5801 Oracle JDK: unspecified vulnerability fixed in 7u45 (2D)↗2013-10-16
▶
CVE-2013-1509 — Oracle Fusion Middleware vulnerability | cvebase