CVE-2013-3763 Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vect...

MediumCVSS 5.5 EPSS 59.8% Framework module Public exploit

Published: 2013-07-17 13:00
Updated: 2026-06-17 02:55
Exploit status: Public exploit available

Description

Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.

Affected products

Product	Affected versions	Fixed in
oracle fusion middleware	= 7.4.0	No fix listed
oracle fusion middleware	= 7.5.1.1	No fix listed

References

CVSS v2.0

5.5 Medium

AV:N/AC:L/Au:S/C:P/I:P/A:N

Access Vector: Network
Access Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 59.84% (percentile 99.1)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Oracle Endeca Server Remote Command Execution Framework module · Metasploit Framework (Rapid7) · 2013-07-16
Oracle Endeca Server - Remote Command Execution (Metasploit) Exploit · Exploit Database (OffSec) · 2013-08-26