CVE-2012-0518
published 2012-10-16CVE-2012-0518: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect…
PriorityP274medium4.7CVSS 3.1
AVNACLPRNUIRSCCNILAN
KEVITW
CISA Known Exploited Vulnerabilitydue 2022-04-18
Exploited in the wild
EPSS
4.66%
90.7th percentile
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | fusion_middleware | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- ·CVE-2012-0518 affects Oracle Application Server Single Sign-On in Oracle Fusion Middleware 10.1.4.3.0 via unknown vectors related to Redirects. No technical details, PoC, or attack specifics are publicly disclosed in the available sources. ↗
- ·CVE-2012-0518 is distinct from CVE-2012-3175, which shares the same component and attack vector (Redirects) but is a separately tracked vulnerability. Detections targeting one may not cover the other. ↗
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vulncheck4.7MEDIUM
cisa4.7MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6v4h-56j5-jr6x: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10
ghsa_unreviewed·2022-05-17·CVSS 4.7
CVE-2012-3175 [MEDIUM] GHSA-6v4h-56j5-jr6x: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-0518.
GHSA
GHSA-cf67-jvfv-7wxp: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10
ghsa_unreviewed·2022-05-04·CVSS 4.3
CVE-2012-0518 [MEDIUM] CWE-601 GHSA-cf67-jvfv-7wxp: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
VulnCheck
Oracle Fusion Middleware Unspecified Vulnerability
vulncheck·2012·CVSS 4.7
CVE-2012-0518 [MEDIUM] CWE-601 Oracle Fusion Middleware Unspecified Vulnerability
Oracle Fusion Middleware Unspecified Vulnerability
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors
Affected: Oracle Fusion Middleware
Required Action: Apply updates per vendor instructions.
Exploitation References: http://www.secuobs.com/revue/news/446124.shtml; https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
Remediation Due: 2022-04-18
CISA
Oracle Fusion Middleware Unspecified Vulnerability
cisa·2022-03-28·CVSS 4.7
CVE-2012-0518 [MEDIUM] CWE-601 Oracle Fusion Middleware Unspecified Vulnerability
Vulnerability: Oracle Fusion Middleware Unspecified Vulnerability
Affected: Oracle Fusion Middleware
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2012-0518
Remediation Due Date: 2022-04-18
No detection rules found.
No public exploits indexed.
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2013:150http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0518
2012-10-16
Published
2022-03-28
Added to CISA KEV
Exploited in the wild