CVE-2012-3186

Опубликовано: 17 окт. 2012

Источник: nvd

CVSS2: 4.9

EPSS Низкий

Описание

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3185.

Ссылки

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Broken Link
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Broken Link
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:fusion_middleware:7.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:7.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:7.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:7.6.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:oracle:fusion_middleware:6.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:6.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:fusion_middleware:6.3:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02167

Низкий

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-p5qx-4pvm-qg6w

github

больше 3 лет назад