All vulnerabilities

Servers and applications

CVE-2013-0418

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent…

Severity
Medium 6.8
Published
17 Jan 2013
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
8.3% in the next 30 daysHigher than 95% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Sources
NVD

Description

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.

From NVD.

Affected software

SoftwareAffected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
  • Version 2007-sp3
  • Version 2010-sp2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-0418
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-0418