CVE-2013-0580

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-10 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users.

Affected products

IBM Infosphere Optim Data Growth For Oracle E-Business Suite: 6.0, 6.1, 6.3.1, 6.3.2, 6.3.3, 6.4.0 (+12)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21651990
https://exchange.xforce.ibmcloud.com/vulnerabilities/83332
http://www-01.ibm.com/support/docview.wss?uid=swg21651990
https://exchange.xforce.ibmcloud.com/vulnerabilities/83332

Get alerted when CVE-2013-0580 or the next vulnerability affects your stack