Critical severity · published May 3, 2012
CVE-2012-1710
Oracle Fusion Middleware Unspecified Vulnerability
RansomwareIn wildKEV
9.8
CVSS
7.8%
EPSS
Yes
On KEV
Description
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.8% · higher than 95% of CVEs
Exploited in the wildYes
CISA KEVListed May 25, 2022
Federal remediation dueJun 15, 2022
Ransomware campaign useKnown
Affected products
Which versions
FM
Fusion Middleware · Oracle
10.1.3.5 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1710
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1710
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securitytracker.com/id?1026949
x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
vendor-advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
More from Fusion Middleware
9.8
CVE-2025-61757
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
9.8
CVE-2021-35587
Oracle Fusion Middleware Unspecified Vulnerability
9.8
CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability
9.1
CVE-2012-3152
Oracle Fusion Middleware Unspecified Vulnerability
4.7
CVE-2012-0518
Oracle Fusion Middleware Unspecified Vulnerability