Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2013-5791 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Oracle Fusion Middleware
6 documents5 sources
Severity
1.5LOWNVD
EPSS
22.4%
top 4.16%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedOct 16
Latest updateMay 14
Description
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to …
CVSS vector
AV:L/AC:M/C:N/I:N/A:PExploitability: 2.7 | Impact: 2.9