CVE-2012-1710 Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via un...
CriticalCVSS 9.8
EPSS 7.8%
CISA KEV
added 2022-05-25 · due 2022-06-15
Ransomware
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
CISA Known Exploited Vulnerability
- Date added
- 2022-05-25
- Due date (FCEB)
- 2022-06-15
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle fusion middleware | = 10.1.3.5 | No fix listed |
References
- 1026949 broken-link third-party-advisory vdb-entry
- www.oracle.com patch vendor-advisory
- MDVSA-2013:150 broken-link vendor-advisory
- www.cisa.gov government-resource us-government-resource