Vulnerability in Oracle Industry Applications
CVE-2013-1520
Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0 and 4.6.6 allows remote authenticated users to affect confidentiality and integrity via vectors related to HTML Surround.
EPSS: 0.009 (57.7th percentile) — read the EPSS interpretation.
Affected products
- Oracle Industry_applications — versions 4.6.0, 4.6.6
- N/a — versions n/a
References
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA)