Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.4

Oracle E-Business Suite CRM component lets attackers view/change data

CVE-2013-0381 · published 13 years ago
Summary

The CRM part of Oracle E-Business Suite (versions 11.5.10.2, 12.0.6, and 12.1.3) can be accessed from outside the network, allowing someone to see or alter business information. This risk affects the confidentiality and integrity of your data. Apply the latest security patches from Oracle and restrict network access to the affected component.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle e-business_suite 11.5.10.2
12.0.6
12.1.3
cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity v...
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Application Framework.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.4 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published17 Jan 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-0381 · NVD
Track software like this
Free during beta