Published: 16/10/2013 Updated: 31/12/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote malicious users to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle fusion middleware 11.1.2.3.0
oracle fusion middleware 11.1.2.4.0
oracle fusion middleware 3.0.1
oracle fusion middleware 3.1.2
oracle fusion middleware 12.1.2.0.0
oracle fusion middleware 12.1.1
oracle fusion middleware 10.3.6
oracle fusion middleware 2.1.1

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 211, 301, and 312; the Oracle JDeveloper component in Oracle Fusion Middleware 111230, 111240, and 121200; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10360 and 1211 allows remote attackers to affect confide ...

A vulnerability (CVE-2013-3827) exists in Cosminexus Component Container Affected products and versions are listed below Please upgrade your version to the appropriate version This vulnerability exists in Cosminexus Component Container which is a component product of other Hitachi products For details about the fixed version about Cosminexus ...

source: wwwsecurityfocuscom/bid/63052/info Oracle JavaServer Faces is prone to multiple directory-traversal vulnerabilities Exploiting these issues may allow an attacker to obtain sensitive information that could aid in further attacks This vulnerability affects the following products and versions: WebLogic Server 10360, 12110 ...

Quick PoC checker for common configurations that might be available via directory traversal due to CVE-2013-3827

CVE-2013-3827 Quick PoC checker for common configurations that might be available via directory traversal due to CVE-2013-3827 Usage: Modify the contents of traversalpy to match your needs python3 traversalpy

NVD-CWE-noinfo http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html http://www.securitytracker.com/id/1029190 http://www.kb.cert.org/vuls/id/526012 http://rhn.redhat.com/errata/RHSA-2014-0029.html http://www.securityfocus.com/bid/63052 https://nvd.nist.gov https://github.com/thistehneisen/CVE-2013-3827 https://www.exploit-db.com/exploits/38802/https://access.redhat.com/security/cve/cve-2013-3827 https://www.kb.cert.org/vuls/id/526012

CVE-2013-3827

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect