{"vulnerability": "CVE-2013-3763", "sightings": [{"uuid": "751f0159-9a33-4cc3-a4f9-caf15858d85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3763", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "a6c125d6-1757-40a2-9962-8b2e76024dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3763", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:18.000000Z"}, {"uuid": "57402d62-f888-40e5-af2b-383cd204139a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3763", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracle_endeca_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2f44151e-1830-4747-9909-1caca260724d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-3763", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/27877", "content": "", "creation_timestamp": "2013-08-26T00:00:00.000000Z"}, {"uuid": "e6a5c398-d98b-4d59-bbee-a15afb1b09b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3763", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracle_endeca_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x64, x86\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability on the Oracle Endeca\\n        Server 7.4.0. The vulnerability exists on the createDataStore method from the\\n        controlSoapBinding web service. The vulnerable method only exists on the 7.4.0\\n        branch and isn't available on the 7.5.5.1 branch. In addition, the injection\\n        has been found to be Windows specific. This module has been tested successfully\\n        on Endeca Server 7.4.0.787 over Windows 2008 R2 (64 bits).\", \"disclosure_date\": \"2013-07-16\", \"fullname\": \"exploit/windows/http/oracle_endeca_exec\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"Oracle Endeca Server Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {}, \"path\": \"/modules/exploits/windows/http/oracle_endeca_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/oracle_endeca_exec\", \"references\": [\"CVE-2013-3763\", \"BID-61217\", \"OSVDB-95269\", \"ZDI-13-190\", \"URL-http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html\"], \"rport\": 7770, \"session_types\": false, \"targets\": [\"Oracle Endeca Server 7.4.0 / Microsoft Windows 2008 R2 64 bits\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:56.513885Z"}]}