Signature Detail
Short Name |
HTTP:ORACLE:ENDECA-SERVER-RCE |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Oracle Endeca Server createDataStore Remote Command Execution |
Release Date |
2013/10/24 |
Update Number |
2313 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Oracle Endeca Server createDataStore Remote Command Execution
This signature detects attempts to exploit a known vulnerability in the Oracle Endeca Server. A successful attack can lead to arbitrary code execution.
Extended Description
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 7.4.0 and 7.5.1.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2013-3764.
Affected Products
- oracle fusion_middleware 7.4.0
- oracle fusion_middleware 7.5.1.1
References
- BugTraq: 61217
- CVE: CVE-2013-3763