CVE-2013-3827

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.

Affected products

Mojarra Jsf2, Oracle Glassfish Server, Oracle Jdeveloper, Oracle Weblogic Server

Oracle Fusion Middleware

= 2.1.1, 3.0.1, 3.1.2, 10.3.6, 11.1.2.3.0, 11.1.2.4.0, 12.1.1, 12.1.2.0.0

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

32.4% (98th percentile)

NVD status

Modified

Published

2013-10-16