### [CVE-2013-3827](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3827) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container. ### POC #### Reference - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html - http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html #### Github - https://github.com/ARPSyndicate/kenzer-templates - https://github.com/thistehneisen/CVE-2013-3827