CVE-2013-2380

2013-04-1717:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2013-2380

oracle

jrockit

fusion middleware

vulnerability

remote attackers

confidentiality

integrity

availability

8.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.0%

JSON

Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware R27.7.4 and earlier and R28.2.6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this might be a duplicate of CVE-2013-1537 and CVE-2013-2415. If so, then CVE-2013-2380 might be REJECTed in the future.

CPENameOperatorVersion
oracle:jrockitoracle jrockiteqr27.3
oracle:jrockitoracle jrockiteqr28.1.0
oracle:jrockitoracle jrockiteqr28.1.1
oracle:jrockitoracle jrockiteqr28.1.3
oracle:jrockitoracle jrockiteqr27.3.1
oracle:jrockitoracle jrockiteqr28.0.1
oracle:fusion_middlewareoracle fusion middlewareeq-
oracle:jrockitoracle jrockiteqr27.2
oracle:jrockitoracle jrockitler27.4
oracle:jrockitoracle jrockiteqr28.0.2

CPE	Name	Operator	Version
oracle:jrockit	oracle jrockit	eq	r27.3
oracle:jrockit	oracle jrockit	eq	r28.1.0
oracle:jrockit	oracle jrockit	eq	r28.1.1
oracle:jrockit	oracle jrockit	eq	r28.1.3
oracle:jrockit	oracle jrockit	eq	r27.3.1
oracle:jrockit	oracle jrockit	eq	r28.0.1
oracle:fusion_middleware	oracle fusion middleware	eq	-
oracle:jrockit	oracle jrockit	eq	r27.2
oracle:jrockit	oracle jrockit	le	r27.4
oracle:jrockit	oracle jrockit	eq	r28.0.2