[ CVE-2012-0518 · Published 16 Oct 2012 ]

Oracle Fusion Middleware Unspecified Vulnerability

Exploited · CISA KEV CVSS 4.7 EPSS 5%Fix available

[ Why it matters ]Priority signals

Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-28

[ Description ]Official description

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

CISA: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 18 Apr 2022): Apply updates per vendor instructions.

Patch on oracle.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References

www.mandriva.com/security/advisoriesBroken Link
www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlPatchVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource