CVE-2013-3764

CVE-2013-3763 (and related CVE-2013-3764) targets Oracle Endeca Server in Oracle Fusion Middleware 7.4.0 and 7.5.1.1. The vulnerability resides in the createDataStore method of the controlSoapBinding web service, enabling arbitrary command injection and remote command execution. Public proofs-of-...