Vulnerability Details : CVE-2012-1772
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.
Products affected by CVE-2012-1772
- cpe:2.3:a:oracle:fusion_middleware:8.3.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-1772
15.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-1772
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST |
References for CVE-2012-1772
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-067
Microsoft Security Bulletin MS12-067 - Important | Microsoft Docs
-
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
Oracle Critical Patch Update - July 2012Vendor Advisory
-
http://www.securitytracker.com/id?1027264
Oracle Fusion Middleware Bugs Let Remote Users Access and Modify Data and Local and Remote Users Deny Service - SecurityTracker
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
mandriva.com
-
http://blogs.technet.com/b/srd/archive/2012/07/24/more-information-on-security-advisory-2737111.aspx
More information on Security Advisory 2737111 – Microsoft Security Response Center
-
http://www.securityfocus.com/bid/54497
Oracle Outside In Technology CVE-2012-1772 Remote Code Execution Vulnerability
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15323
Repository / Oval Repository
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-058
Microsoft Security Bulletin MS12-058 - Critical | Microsoft Docs
-
http://www.kb.cert.org/vuls/id/118913
VU#118913 - Oracle Outside In contains multiple exploitable vulnerabilitiesUS Government Resource
-
http://technet.microsoft.com/security/advisory/2737111
Microsoft Security Advisory 2737111 | Microsoft Docs
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/77005
Oracle Outside In Technology Outside In Filters .PCX denial of service CVE-2012-1772 Vulnerability Report
-
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
Security Bulletin: Fix available for security vulnerabilities in Oracle Outside In Technology Code contained in IBM WebSphere Portal
Jump to