CrowdSecLive Exploit Tracker
Background NoiseCVE-2013-3827Public Exploit

Oracle Fusion - LFI (CVE-2013-3827)

PublishedOct 16, 2013
First SeenMar 27, 2025
Last Seen
Reported
CVSS5.0
Oracle
OracleFusion Middleware
enterprise_software

Description

Local File Inclusion (LFI) vulnerabilities in Oracle Fusion

psychologyCrowdSec Analysis

CVE-2013-3827 is a Local File Inclusion (LFI) vulnerability impacting Oracle Fusion. Attackers can leverage path traversal in specific resource-handling endpoints to read arbitrary files from the server.

CrowdSec has been tracking this vulnerability and its exploits since 27th of March 2025.

CrowdSec network data shows that most actors exploiting CVE-2013-3827 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. Data from the CrowdSec community also indicates a gradual decrease in attacks targeting CVE-2013-3827. While still present in the wild, exploitation levels have dropped noticeably week-over-week. This may signal that the vulnerability is becoming less relevant or that defenses are improving fast enough for attackers to lose interest.

Observed attack attempts focus on URLs containing /javax.faces.resource and making use of traversal patterns within certain parameters.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2013-10-16
Rule Released2025-03-27
CrowdSec First Seen2025-03-27

Related Weaknesses

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References