Veille CVE
CVE-2012-1710
9.8 Critique Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Oracle Fusion Middleware Unspecified Vulnerability
Ajoutée le 25/05/2022 · Échéance de correction (agences US) : 15/06/2022
Action requise : Apply updates per vendor instructions.
Description
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.5 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Références
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html PatchVendor Advisory
- http://www.securitytracker.com/id?1026949 Broken LinkThird Party AdvisoryVDB Entry
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html PatchVendor Advisory
- http://www.securitytracker.com/id?1026949 Broken LinkThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1710 US Government Resource