CVE-2013-2959

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-27 · updated 2026-06-16
Weakness: CWE-255

Description

The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

IBM Infosphere Optim Data Growth For Oracle E-Business Suite: 6.0, 6.1, 6.3.1, 6.3.2, 6.3.3, 6.4.0 (+12)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21637444
https://exchange.xforce.ibmcloud.com/vulnerabilities/83668
http://www-01.ibm.com/support/docview.wss?uid=swg21637444
https://exchange.xforce.ibmcloud.com/vulnerabilities/83668

Get alerted when CVE-2013-2959 or the next vulnerability affects your stack