Unscored severity · published Jul 17, 2012
CVE-2012-1738
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IW
Iplanet Web Server · Oracle
7.0 · source: NVD
SP
Sun Products Suite Java System Web Server · Oracle
6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1738
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1738
osvdb.org
http://osvdb.org/83974
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
www.securityfocus.com
http://www.securityfocus.com/bid/54515
www.securitytracker.com
http://www.securitytracker.com/id?1027276
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77058
More from Iplanet Web Server
9.8
CVE-2015-7182
Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0 and Firefox ESR…
8.8
CVE-2016-1950
Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR…
7.5
CVE-2020-9315
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by…
6.1
CVE-2017-10055
Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface)
4.8
CVE-2020-9314
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI