Oracle Industry Applications CVE-2013-5856 Remote Security Vulnerability

Bugtraq ID:	63099
Class:	Unknown
CVE:	CVE-2013-5856
Remote:	Yes
Local:	No
Published:	Oct 15 2013 12:00AM
Updated:	Oct 15 2013 12:00AM
Credit:	Oracle
Vulnerable:
Not Vulnerable:

Oracle Industry Applications CVE-2013-5856 Remote Security Vulnerability

Oracle Industry Applications is prone to a remote security vulnerability in Oracle Health Sciences InForm.

The vulnerability can be exploited over the 'HTTP' protocol. The 'Web' sub component is affected.

This vulnerability affects the following supported versions:
4.5 SP3, 4.5 SP3a-k, 4.6 SP0, 4.6 SP0a-c, 4.6 SP1, 4.6 SP1a-c, 4.6 SP2, 4.6 SP2a-c, 5.0 SP0, 5.0 SP0a, 5.0 SP1, 5.0 SP1a-b, 5.5 SP0, 5.5 SP0b, 5.5.1, and 6.0.0

Oracle Industry Applications CVE-2013-5856 Remote Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Industry Applications CVE-2013-5856 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Industry Applications CVE-2013-5856 Remote Security Vulnerability

References: