{"api_version":"1","generated_at":"2026-07-23T12:03:00+00:00","cve":"CVE-2010-3589","urls":{"html":"https://cve.report/CVE-2010-3589","api":"https://cve.report/api/cve/CVE-2010-3589.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-3589","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3589"},"summary":{"title":"CVE-2010-3589","description":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.","state":"PUBLISHED","assigner":"oracle","published_at":"2011-01-19 16:00:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64781","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64781","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2011/0144","name":"http://www.vupen.com/english/advisories/2011/0144","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail - OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/45861","name":"http://www.securityfocus.com/bid/45861","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Application Object Library CVE-2010-3589 Remote Security Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","name":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update Pre-Release Announcement - January   2011","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/42922","name":"http://secunia.com/advisories/42922","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle E-Business Suite Two Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3589","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3589","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"11.5.10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"12.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"12.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"12.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"12.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"12.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"3589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"e-business_suite","cpe6":"12.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T03:18:51.334Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"42922","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/42922"},{"name":"ADV-2011-0144","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2011/0144"},{"name":"oracle-ebusiness-library-unauth-access(64781)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64781"},{"name":"45861","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/45861"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-01-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"42922","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/42922"},{"name":"ADV-2011-0144","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2011/0144"},{"name":"oracle-ebusiness-library-unauth-access(64781)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64781"},{"name":"45861","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/45861"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2010-3589","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"42922","refsource":"SECUNIA","url":"http://secunia.com/advisories/42922"},{"name":"ADV-2011-0144","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2011/0144"},{"name":"oracle-ebusiness-library-unauth-access(64781)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64781"},{"name":"45861","refsource":"BID","url":"http://www.securityfocus.com/bid/45861"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2010-3589","datePublished":"2011-01-19T15:00:00.000Z","dateReserved":"2010-09-20T00:00:00.000Z","dateUpdated":"2024-08-07T03:18:51.334Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-01-19 16:00:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"80B61990-9CC2-4215-9879-AC817F4E6767"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7B1264C3-F841-4106-A8C3-B4C15051D71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4DBE3A62-B8E5-4C33-BD5E-D55E547C641D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4C6BAB4D-1DF5-4ECB-A07E-297A94664BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ADF7F7A-BE8A-4C98-AA90-66FFF7715049"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DDCEC764-252B-4526-9701-A7D1781D8CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9E42C3CE-CA98-4C13-B41E-DF7A3FEC560F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"3589","Ordinal":"1","Title":"CVE-2010-3589","CVE":"CVE-2010-3589","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"3589","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle Application Object Library component in Oracle Applications 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Logout.","Type":"Description","Title":"CVE-2010-3589"},{"CveYear":"2010","CveId":"3589","Ordinal":"2","NoteData":"2011-01-19","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"3589","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}