CVE-2013-3827

None

CVSS

—

EPSS

32.4%

Published

Oct 16, 2013

CISA due date

—

The record

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.

Affected packages

Ecosystem	Package	Introduced	Fixed
Maven	org.glassfish:javax.faces	2.0.0	2.1.19
maven	com.sun.faces/jsf-impl	2-alpha0	No fix
maven	org.glassfish/javax.faces	2.0.0	2.1.19