[ CVE-2012-1710 · Published 3 May 2012 ]

Oracle Fusion Middleware Unspecified Vulnerability

Exploited · CISA KEV CVSS 9.8 EPSS 8%Fix available

[ Why it matters ]Priority signals

Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-05-25
Known to be used in ransomware campaigns
Critical severity: CVSS 9.8

[ Description ]Official description

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

CISA: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 15 Jun 2022): Apply updates per vendor instructions.

Patch on oracle.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References

www.mandriva.com/security/advisoriesBroken Link
www.oracle.com/technetwork/topics/security/cpuapr2012-366314.htmlPatchVendor Advisory
www.securitytracker.com/idBroken LinkThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource