Vulnerabilities > CVE-2013-5771 - XML Parser Remote Security vulnerability in Oracle Database Server

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
oracle
nessus

Summary

Unspecified vulnerability in the XML Parser component in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1 allows remote attackers to affect confidentiality and availability via unknown vectors.

Nessus

NASL familyDatabases
NASL idORACLE_RDBMS_CPU_OCT_2013.NASL
descriptionThe remote Oracle database server is missing the October 2013 Critical Patch Update (CPU). It is, therefore, affected by multiple security vulnerabilities in the following components : - Core RDBMS - Oracle Security service - XML Parser
last seen2020-06-02
modified2013-10-16
plugin id70460
published2013-10-16
reporterThis script is Copyright (C) 2013-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/70460
titleOracle Database Multiple Vulnerabilities (October 2013 CPU) (BEAST)

Oval

accepted2014-02-10T04:00:17.681-05:00
classvulnerability
contributors
  • nameMaria Kedovskaya
    organizationALTX-SOFT
  • nameMaria Kedovskaya
    organizationALTX-SOFT
definition_extensions
commentOracle Database Server is installed
ovaloval:org.mitre.oval:def:17171
descriptionUnspecified vulnerability in the XML Parser component in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1 allows remote attackers to affect confidentiality and availability via unknown vectors.
familywindows
idoval:org.mitre.oval:def:19209
statusaccepted
submitted2013-10-24T16:31:26.748+04:00
titleUnspecified vulnerability in the XML Parser component in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1
version22