RULE(RULE ID:305214)

Rule General Information
Release Date: 2015-04-23
Rule Name: Oracle E-business Suite Remote Security Vulnerability (CVE-2013-0397)
Severity:
CVE ID:
Rule Protection Details
Description: Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Diagnostics.
Impact: An attacker can take advantage of the vulnerability to bypass the security policy implemented by the software administrator, and do harm to the target system.
Affected OS: Windows
Reference: http://marc.info/?l=bugtraq&m=139344343412337&w=2
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
Solutions
The vendor has released a patch to fix the vulnerability. Check the vendor advisory in the references section for details.