CVE-2012-1710
Published 2012-05-03 · Updated 2026-10-01 · Source secalert_us@oracle.com
Summary
CVE-2012-1710 is a critical-severity (CVSS 9.8) vulnerability in Oracle Fusion Middleware. CISA added it to the Known Exploited Vulnerabilities catalog on May 25, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by June 15, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Oracle has 46 vulnerabilities in the KEV catalog, 13 of them linked to ransomware.
All 46 known-exploited Oracle vulnerabilities →Description
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Oracle — Fusion Middleware
Name: Oracle Fusion Middleware Unspecified Vulnerability
Date added: 2022-05-25 · Due: 2022-06-15
Required action: Apply updates per vendor instructions.
References
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
- http://www.securitytracker.com/id?1026949
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
- http://www.securitytracker.com/id?1026949
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1710