CVE-2013-3751

Published: Jul 17, 2013Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in the XML Parser component in Oracle Database Server 11.2.0.2, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected (2)

Products: Oracle: Database Server

Oracle

1 product

Database Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 11.2.0.2
Oracle Database Server	Version 11.2.0.3

References (18)

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00000.html

Source: secalert_us@oracle.com

http://osvdb.org/95264

Source: secalert_us@oracle.com

http://seclists.org/fulldisclosure/2014/Dec/23

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: secalert_us@oracle.com

http://www.securitytracker.com/id/1028789

Source: secalert_us@oracle.com

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: secalert_us@oracle.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/85650

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00000.html