{"api_version":"1","generated_at":"2026-07-23T12:04:44+00:00","cve":"CVE-2013-3816","urls":{"html":"https://cve.report/CVE-2013-3816","api":"https://cve.report/api/cve/CVE-2013-3816.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-3816","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-3816"},"summary":{"title":"CVE-2013-3816","description":"Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine.","state":"PUBLISHED","assigner":"oracle","published_at":"2013-07-17 13:41:16","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/54234","name":"http://secunia.com/advisories/54234","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA54234 - Oracle Policy Automation Determinations Engine Information Disclosure Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/95302","name":"http://osvdb.org/95302","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","name":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - July 2013","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/85689","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/85689","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1028797","name":"http://www.securitytracker.com/id/1028797","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Industry Applications Bug Lets Remote Authenticated Users Partially Access Data - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3816","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3816","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"3816","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"10.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3816","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"10.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3816","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"10.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3816","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"10.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3816","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"10.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3816","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"industry_applications","cpe6":"10.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T16:22:01.289Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1028797","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1028797"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"},{"name":"54234","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/54234"},{"name":"95302","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/95302"},{"name":"oracle-cpujuly2013-cve20133816(85689)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/85689"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-07-16T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"1028797","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1028797"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"},{"name":"54234","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/54234"},{"name":"95302","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/95302"},{"name":"oracle-cpujuly2013-cve20133816(85689)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/85689"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2013-3816","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1028797","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1028797"},{"name":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html"},{"name":"54234","refsource":"SECUNIA","url":"http://secunia.com/advisories/54234"},{"name":"95302","refsource":"OSVDB","url":"http://osvdb.org/95302"},{"name":"oracle-cpujuly2013-cve20133816(85689)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/85689"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2013-3816","datePublished":"2013-07-17T10:00:00.000Z","dateReserved":"2013-06-03T00:00:00.000Z","dateUpdated":"2024-08-06T16:22:01.289Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-07-17 13:41:16","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:10.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3128B11F-744F-4902-9D26-228720857DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:10.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9D6A48AF-017A-46C9-9763-55FAE71CC45C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C6F2DAED-3184-4838-98CE-2C3FDF5C6E60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:10.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9FAB9F1-1E3C-4386-A8C7-98115F5CAC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8165804F-C28B-4C96-A880-E41EA2E6FCB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:industry_applications:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0AC66C46-B3B0-4631-9D59-9FCBD8E8F370"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"3816","Ordinal":"1","Title":"CVE-2013-3816","CVE":"CVE-2013-3816","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"3816","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine.","Type":"Description","Title":"CVE-2013-3816"},{"CveYear":"2013","CveId":"3816","Ordinal":"2","NoteData":"2013-07-17","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"3816","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}