{"api_version":"1","generated_at":"2026-07-23T07:16:00+00:00","cve":"CVE-2013-3779","urls":{"html":"https://cve.report/CVE-2013-3779","api":"https://cve.report/api/cve/CVE-2013-3779.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-3779","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-3779"},"summary":{"title":"CVE-2013-3779","description":"Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.","state":"PUBLISHED","assigner":"oracle","published_at":"2013-07-17 13:41:16","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/61226","name":"http://www.securityfocus.com/bid/61226","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Secure Global Desktop CVE-2013-3779 Remote Security Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","name":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - July 2013","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/54238","name":"http://secunia.com/advisories/54238","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA54238 - Oracle Secure Global Desktop Web UI Two Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/95319","name":"http://osvdb.org/95319","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securitytracker.com/id/1028793","name":"http://www.securitytracker.com/id/1028793","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Virtualization Flaws Let Remote Users Partially Access and Modify Data and Partially Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3779","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3779","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"virtualization","cpe6":"4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"virtualization","cpe6":"4.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"virtualization","cpe6":"4.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"virtualization","cpe6":"4.63","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"virtualization","cpe6":"4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.63","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3779","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"vm_virtualbox","cpe6":"4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T16:22:00.930Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"},{"name":"54238","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/54238"},{"name":"1028793","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1028793"},{"name":"95319","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/95319"},{"name":"61226","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/61226"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-07-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-08-22T09:00:00.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"},{"name":"54238","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/54238"},{"name":"1028793","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1028793"},{"name":"95319","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/95319"},{"name":"61226","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/61226"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2013-3779","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"},{"name":"54238","refsource":"SECUNIA","url":"http://secunia.com/advisories/54238"},{"name":"1028793","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1028793"},{"name":"95319","refsource":"OSVDB","url":"http://osvdb.org/95319"},{"name":"61226","refsource":"BID","url":"http://www.securityfocus.com/bid/61226"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2013-3779","datePublished":"2013-07-17T10:00:00.000Z","dateReserved":"2013-06-03T00:00:00.000Z","dateUpdated":"2024-08-06T16:22:00.930Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-07-17 13:41:16","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:virtualization:4.6:*:*:*:*:*:*:*","matchCriteriaId":"3F4EB8B7-9984-42D3-847C-91FF753D159A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:virtualization:4.7:*:*:*:*:*:*:*","matchCriteriaId":"4946E73A-27B2-4BF2-8372-65D81D42272E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:virtualization:4.61:*:*:*:*:*:*:*","matchCriteriaId":"CFB307EC-F585-4912-9DF0-66333FFF966A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:virtualization:4.62:*:*:*:*:*:*:*","matchCriteriaId":"A861D950-EF90-4384-A904-DB7742DFAE1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:virtualization:4.63:*:*:*:*:*:*:*","matchCriteriaId":"0A7DA626-EC3E-4066-A7DD-14D42B3DAE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.6:*:*:*:*:*:*:*","matchCriteriaId":"2DAE783C-6D98-4DC1-8358-874940D54E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.7:*:*:*:*:*:*:*","matchCriteriaId":"CF3FD992-486A-4037-9D87-8F9D57DB485C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.61:*:*:*:*:*:*:*","matchCriteriaId":"77388DA3-2A64-443D-A41F-935C10834F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.62:*:*:*:*:*:*:*","matchCriteriaId":"E5E4FC2E-85DA-48D3-9410-8172662B94C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:4.63:*:*:*:*:*:*:*","matchCriteriaId":"FA5245A9-2A2C-4153-913A-085F5A6AF29A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"3779","Ordinal":"1","Title":"CVE-2013-3779","CVE":"CVE-2013-3779","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"3779","Ordinal":"1","NoteData":"Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI.","Type":"Description","Title":"CVE-2013-3779"},{"CveYear":"2013","CveId":"3779","Ordinal":"2","NoteData":"2013-07-17","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"3779","Ordinal":"3","NoteData":"2013-08-22","Type":"Other","Title":"Modified"}]}}}