Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain.
Conclusion & alert: CVE-2013-3210 is rated Low Risk (34.9/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.23%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2025-03-30 | 0.36% | 0.23% | -0.13% |
| 2 | 2025-03-29 | 0.18% | 0.36% | +0.19% |
| 3 | 2024-09-17 | — | 0.18% | — |
Full EPSS history (6 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 5.0 | 2.0 | MEDIUM |
|
10.0 | 2.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| opera | opera_browser | <= 12.14 | cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:* |
| opera | opera_browser | 3.00 | cpe:2.3:a:opera:opera_browser:3.00:*:*:*:*:*:*:* |
| opera | opera_browser | 3.00 | cpe:2.3:a:opera:opera_browser:3.00:beta:*:*:*:*:*:* |
| opera | opera_browser | 3.10 | cpe:2.3:a:opera:opera_browser:3.10:*:*:*:*:*:*:* |
| opera | opera_browser | 3.21 | cpe:2.3:a:opera:opera_browser:3.21:*:*:*:*:*:*:* |
| opera | opera_browser | 3.50 | cpe:2.3:a:opera:opera_browser:3.50:*:*:*:*:*:*:* |
| opera | opera_browser | 3.51 | cpe:2.3:a:opera:opera_browser:3.51:*:*:*:*:*:*:* |
| opera | opera_browser | 3.60 | cpe:2.3:a:opera:opera_browser:3.60:*:*:*:*:*:*:* |
| opera | opera_browser | 3.61 | cpe:2.3:a:opera:opera_browser:3.61:*:*:*:*:*:*:* |
| opera | opera_browser | 3.62 | cpe:2.3:a:opera:opera_browser:3.62:*:*:*:*:*:*:* |
| opera | opera_browser | 3.62 | cpe:2.3:a:opera:opera_browser:3.62:beta:*:*:*:*:*:* |
| opera | opera_browser | 4.00 | cpe:2.3:a:opera:opera_browser:4.00:*:*:*:*:*:*:* |
| opera | opera_browser | 4.00 | cpe:2.3:a:opera:opera_browser:4.00:beta2:*:*:*:*:*:* |
| opera | opera_browser | 4.00 | cpe:2.3:a:opera:opera_browser:4.00:beta3:*:*:*:*:*:* |
| opera | opera_browser | 4.00 | cpe:2.3:a:opera:opera_browser:4.00:beta4:*:*:*:*:*:* |
| opera | opera_browser | 4.00 | cpe:2.3:a:opera:opera_browser:4.00:beta5:*:*:*:*:*:* |
| opera | opera_browser | 4.00 | cpe:2.3:a:opera:opera_browser:4.00:beta6:*:*:*:*:*:* |
| opera | opera_browser | 4.01 | cpe:2.3:a:opera:opera_browser:4.01:*:*:*:*:*:*:* |
| opera | opera_browser | 4.02 | cpe:2.3:a:opera:opera_browser:4.02:*:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta6:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta7:*:*:*:*:*:* |
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta8:*:*:*:*:*:* |
| opera | opera_browser | 5.02 | cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:* |
| opera | opera_browser | 5.10 | cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:* |
| opera | opera_browser | 5.11 | cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:* |
| opera | opera_browser | 5.12 | cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:beta1:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:beta2:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:beta3:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:tp1:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:tp2:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:tp3:*:*:*:*:*:* |
| opera | opera_browser | 6.1 | cpe:2.3:a:opera:opera_browser:6.1:*:*:*:*:*:*:* |
| opera | opera_browser | 6.01 | cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:* |
| opera | opera_browser | 6.1 | cpe:2.3:a:opera:opera_browser:6.1:beta1:*:*:*:*:*:* |
| opera | opera_browser | 6.02 | cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:* |
| opera | opera_browser | 6.03 | cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:* |
| opera | opera_browser | 6.04 | cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:* |
| opera | opera_browser | 6.05 | cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:* |
| opera | opera_browser | 6.06 | cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:* |
| opera | opera_browser | 6.11 | cpe:2.3:a:opera:opera_browser:6.11:*:*:*:*:*:*:* |
| opera | opera_browser | 6.12 | cpe:2.3:a:opera:opera_browser:6.12:*:*:*:*:*:*:* |
| opera | opera_browser | 7.0 | cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:* |
| opera | opera_browser | 7.0 | cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:* |
| opera | opera_browser | 7.0 | cpe:2.3:a:opera:opera_browser:7.0:beta1_v2:*:*:*:*:*:* |
| opera | opera_browser | 7.0 | cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:* |
| opera | opera_browser | 7.01 | cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:* |
| opera | opera_browser | 7.02 | cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:* |
| opera | opera_browser | 7.03 | cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:* |
| opera | opera_browser | 7.10 | cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:* |
| opera | opera_browser | 7.10 | cpe:2.3:a:opera:opera_browser:7.10:beta1:*:*:*:*:*:* |
| opera | opera_browser | 7.11 | cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:* |
| opera | opera_browser | 7.11 | cpe:2.3:a:opera:opera_browser:7.11:beta2:*:*:*:*:*:* |
| opera | opera_browser | 7.20 | cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:* |
| opera | opera_browser | 7.20 | cpe:2.3:a:opera:opera_browser:7.20:beta7:*:*:*:*:*:* |
| opera | opera_browser | 7.21 | cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:* |
| opera | opera_browser | 7.22 | cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:* |
| opera | opera_browser | 7.23 | cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:* |
| opera | opera_browser | 7.50 | cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:* |
| opera | opera_browser | 7.50 | cpe:2.3:a:opera:opera_browser:7.50:beta1:*:*:*:*:*:* |
| opera | opera_browser | 7.51 | cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:* |
| opera | opera_browser | 7.52 | cpe:2.3:a:opera:opera_browser:7.52:*:*:*:*:*:*:* |
| opera | opera_browser | 7.53 | cpe:2.3:a:opera:opera_browser:7.53:*:*:*:*:*:*:* |
| opera | opera_browser | 7.54 | cpe:2.3:a:opera:opera_browser:7.54:*:*:*:*:*:*:* |
| opera | opera_browser | 7.54 | cpe:2.3:a:opera:opera_browser:7.54:update1:*:*:*:*:*:* |
| opera | opera_browser | 7.54 | cpe:2.3:a:opera:opera_browser:7.54:update2:*:*:*:*:*:* |
| opera | opera_browser | 7.60 | cpe:2.3:a:opera:opera_browser:7.60:*:*:*:*:*:*:* |
| opera | opera_browser | 8.0 | cpe:2.3:a:opera:opera_browser:8.0:*:*:*:*:*:*:* |
| opera | opera_browser | 8.0 | cpe:2.3:a:opera:opera_browser:8.0:beta1:*:*:*:*:*:* |
| opera | opera_browser | 8.0 | cpe:2.3:a:opera:opera_browser:8.0:beta2:*:*:*:*:*:* |
| opera | opera_browser | 8.0 | cpe:2.3:a:opera:opera_browser:8.0:beta3:*:*:*:*:*:* |
| opera | opera_browser | 8.01 | cpe:2.3:a:opera:opera_browser:8.01:*:*:*:*:*:*:* |
| opera | opera_browser | 8.02 | cpe:2.3:a:opera:opera_browser:8.02:*:*:*:*:*:*:* |
| opera | opera_browser | 8.50 | cpe:2.3:a:opera:opera_browser:8.50:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://www.opera.com/docs/changelogs/unified/1215/ | |
| http://www.opera.com/security/advisory/1047 | Vendor Advisory |