9.8Critical
KEV
Used in ransomware
CVE-2012-1710Oracle Fusion Middleware Unspecified Vulnerability
Known exploited — Oracle Fusion Middleware Unspecified Vulnerability
CISA confirmed this vulnerability is used in real attacks on 25.05.2022. Remediation deadline for US federal agencies: 15.06.2022.
Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2012-1710
Description
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| oracle | fusion middleware | 10.1.3.5 |
References and patches
- 1026949 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html PatchVendor Advisory
- MDVSA-2013:150 vendor-advisoryBroken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1710 US Government Resource
CPE matches (NVD) (1)
cpe:2.3:a:oracle:fusion_middleware:10.1.3.5:*:*:*:*:*:*:*