Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-1744 — Oracle Fusion Middleware vulnerability

5 documents4 sources

Severity

2.1LOWNVD

EPSS

6.3%

top 8.99%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Oracle Fusion Middleware

Timeline

PublishedJul 17

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent users to affect availability via unknown vectors related to Outside In Filters.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/fusion_middleware8.3.5.0, 8.3.7.0+1

🔴Vulnerability Details

GHSA

GHSA-pxw8-cr7g-xv95: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8↗2022-05-17

▶

CVEList

CVE-2012-1744: Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8↗2012-07-17

▶

💥Exploits & PoCs

Exploit-DB

PHPWCMS 1.5.4.6 - 'preg_replace' Multiple Vulnerabilities↗2012-12-17

▶

Exploit-DB

Oracle Outside-In - '.FPX' File Parsing Heap Overflow↗2012-07-20

▶