Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3129 State: PUBLISHED Published: 2012-07-17T22:39:00 Last Updated: 2024-08-06T19:57:49.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, integrity, and availability, related to Gnome PDF viewer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77045 - http://www.securitytracker.com/id?1027274 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.securityfocus.com/bid/54513 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://osvdb.org/839
www.securityfocus.com/bid/54513 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://osvdb.org/83936
CVE ID: CVE-2012-3130 State: PUBLISHED Published: 2012-07-17T22:39:00 Last Updated: 2024-08-06T19:57:50.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via unknown vectors related to pkg.depotd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/54559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77053 - http://osvdb.org/83931 - http://www.securitytracker.com/id?1027274 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3131 State: PUBLISHED Published: 2012-07-17T22:39:00 Last Updated: 2024-08-06T19:57:49.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows remote attackers to affect confidentiality, related to Network/NFS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77054 - http://www.securitytracker.com/id?1027274 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://osvdb.org/83930 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://www.securityfocus.com/bid/54560
CVE ID: CVE-2012-3132 State: PUBLISHED Published: 2012-08-10T23:00:00 Last Updated: 2024-08-06T19:57:49.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS. Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/database-security/167901020/security/news/240004776/hacking-oracle-database-indexes.html - http://www.securitytracker.com/id?1027367 - http://www.network
ity/news/240004776/hacking-oracle-database-indexes.html - http://www.securitytracker.com/id?1027367 - http://www.networkworld.com/news/2012/072712-black-hat-shark-bitten-security-researcher-261203.html - http://www.teamshatter.com/topics/general/team-shatter-exclusive/ctxsys-context-privilege-escalation/ - http://www.oracle.com/technetwork/topics/security/alert-cve-2012-3132-1721017.html - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - https://blogs.oracle.com/security/entry/security_alert_cve_2012_3132
CVE ID: CVE-2012-3133 State: PUBLISHED Published: 2012-12-21T02:00:00Z Last Updated: 2024-09-16T20:06:47.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.oracle.com/sunsecurity/entry/cve_2012_3133_buffer_overflow
CVE ID: CVE-2012-3134 State: PUBLISHED Published: 2012-07-17T22:39:00 Last Updated: 2024-08-06T19:57:50.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html - http://www.securitytracker.com/id?1027260 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://www.securityfocus.com/bid/54496 - http://osvdb.org/83949 - http://www.man
opics/security/cpujul2012-392727.html - http://www.securityfocus.com/bid/54496 - http://osvdb.org/83949 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3135 State: PUBLISHED Published: 2012-07-17T22:39:00 Last Updated: 2024-08-06T19:57:50.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.3 and before, and 27.7.2 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027264 - http://www.securityfocus.com/bid/54494 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/76993 - http://www.mandri
/topics/security/cpujul2012-392727.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/76993 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3136 State: PUBLISHED Published: 2012-08-30T23:00:00 Last Updated: 2024-08-06T19:57:50.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html - http://marc.info/?l=bugtraq&m=135109152819176&w=2 - http://www.oracle.com/technetwork/topics/security/alert-cve-
.html - http://marc.info/?l=bugtraq&m=135109152819176&w=2 - http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html - http://rhn.redhat.com/errata/RHSA-2012-1225.html - http://secunia.com/advisories/51044 - http://marc.info/?l=bugtraq&m=135109152819176&w=2
CVE ID: CVE-2012-3137 State: PUBLISHED Published: 2012-09-21T23:00:00 Last Updated: 2024-08-06T19:57:50.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka "stealth password cracking vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-e
iner: References: - http://www.darkreading.com/authentication/167901072/security/application-security/240007643/attack-easily-cracks-oracle-database-passwords.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.exploit-db.com/exploits/22069 - http://threatpost.com/en_us/blogs/flaw-oracle-logon-protocol-leads-easy-password-cracking-092012?utm_source=Threatpost&utm_medium=Tabs&utm_campaign=Today%27s+Most+Popular - http://arstechnica.com/security/2012/09/oracle-database-stealth-password-cracking-vulnerability/ - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.securityfocus.com/bid/55651 - http://www.mandriva.com/
/technetwork/topics/security/cpuoct2012-1515893.html - http://www.securityfocus.com/bid/55651 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3138 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3139 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO). Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3140 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3141 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability than CVE-2012-3227. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79351 - http://secunia.com/advisories/51005 - http://www.oracle.com/technetwork/topics/security/cpu
.com/vulnerabilities/79351 - http://secunia.com/advisories/51005 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3142 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:49.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.5, 5.1.0, 5.2.0, and 5.3.0 through 5.3.4 allows remote authenticated users to affect confidentiality, related to BASE. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://secunia.com/advisories/51019 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - https://exchange.xforce.ibmcloud.com/vulnerabilities
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79359
CVE ID: CVE-2012-3143 State: PUBLISHED Published: 2012-10-16T21:29:00 Last Updated: 2024-08-06T19:57:49.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JMX, a different vulnerability than CVE-2012-5089. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/i
-security-announce/2012-10/msg00016.html - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html - http://rhn.redhat.com/errata/RHSA-2012-1466.html - http://secunia.com/advisories/51315 - http://secunia.com/advisories/51438 - http://secunia.com/advisories/51141 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21621154 - http://www.securityfocus.com/bid/56055 - http://rhn.redhat.com/errata/RHSA-2013-1455.html - http://rhn.redhat.com/errata/RHSA-2012-1391.html - http://www-01.ibm.com/support/docview.wss?uid=swg21620037 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - https://oval.cisecurity.org/reposito
t/docview.wss?uid=swg21620037 - http://marc.info/?l=bugtraq&m=135758563611658&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16686 - http://secunia.com/advisories/51390 - http://rhn.redhat.com/errata/RHSA-2012-1392.html - http://www-01.ibm.com/support/docview.wss?uid=swg21631786 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html - http://www-01.ibm.com/support/docview.wss?uid=swg21616490 - http://secunia.com/advisories/51327 - http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.html - http://secunia.com
http://rhn.redhat.com/errata/RHSA-2012-1467.html - http://rhn.redhat.com/errata/RHSA-2012-1465.html - http://secunia.com/advisories/51328 - http://www-01.ibm.com/support/docview.wss?uid=swg21620575 - http://marc.info/?l=bugtraq&m=135542848327757&w=2 - http://rhn.redhat.com/errata/RHSA-2013-1456.html - http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html - http://secunia.com/advisories/51326 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/79419 - http://marc.info/?l=bugtraq&m=135542848327757&w=2
CVE ID: CVE-2012-3144 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79387 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.ubuntu.com/usn/USN-1621-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3145 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.0.5, 5.1.0, 5.2.0, 5.3.0 through 5.3.4, and 6.2.0 allows local users to affect confidentiality, related to BASE. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79356 - http://secunia.com/advisories/51019 - http://www.mandriva.com/security/advisories?name=MDVSA-201
vulnerabilities/79356 - http://secunia.com/advisories/51019 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3146 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/86387 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3147 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51177 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:102 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79384 - http://www.ubuntu.com/usn/USN-1621-1 - http://ww
893.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79384 - http://www.ubuntu.com/usn/USN-1621-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3148 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:49.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Field Service component in Oracle E-Business Suite 12.1.3 allows remote authenticated users to affect integrity, related to Wireless/WAP upload. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3149 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote authenticated users to affect confidentiality, related to MySQL Client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79390 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.ubuntu.com/usn/USN-1621-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3150 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51177 - http://rhn.redhat.com/errata/RHSA-2012-1462.html - http://secunia.com/advisories/53372 - http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.debian.org/security/2012/dsa-2581 - http://www.oracle.
- http://security.gentoo.org/glsa/glsa-201308-06.xml - http://www.debian.org/security/2012/dsa-2581 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://secunia.com/advisories/51309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79388 - http://www.ubuntu.com/usn/USN-1621-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3151 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:50.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Unix and Linux platforms, allows local users to affect integrity and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3152 State: PUBLISHED Published: 2012-10-16T23:00:00.000Z Last Updated: 2025-10-22T00:05:45.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the URLPARAMETER functionality allows remote attackers to read and upload arbitrary files to reports/rwservlet, and that this issue occurs in earlie
ty allows remote attackers to read and upload arbitrary files to reports/rwservlet, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3153 to execute arbitrary code by uploading a .jsp file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/ - http://www.exploit-db.com/exploits/31253 - http://www.osvdb.org/86394 - http://www.securityfocus.com/bid/55955 - http://www.osvdb.org/86395 - http://www.youtube.com/watch?v=NinvMDOj7sM - http://seclists.org/fulldisclosure/2014/Jan/186 - http://www.oracle.com/technetwork/topics/s
e.com/watch?v=NinvMDOj7sM - http://seclists.org/fulldisclosure/2014/Jan/186 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/79295 - http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2012-3153 State: PUBLISHED Published: 2012-10-16T23:00:00 Last Updated: 2024-08-06T19:57:49.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: th
o obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/79296 - http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/ - http://www.exploit-db.com/exploits/31253 - http://seclists.org/fulldisclosure/2014/Jan/186 - http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html - http://www.securityfocus.com/bid/55961 - http://blog.netinfiltration.com/2013/11/03/oracle-rep
cpuoct2012-1515893.html - http://www.securityfocus.com/bid/55961 - http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/ - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150