CVE-2012-0554

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK, a different vulnerability than CVE-2012-0555, CVE-2012-0556, and CVE-2012-0557.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html	Vendor Advisory
http://www.securityfocus.com/bid/53069
http://www.securitytracker.com/id?1026949

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:fusion_middleware:8.3.5.0:::::::*
	cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:::::::*

History

No history.

Information

Published : 2012-05-03 18:55

Updated : 2017-12-07 02:29

NVD link : CVE-2012-0554

Mitre link : CVE-2012-0554

CVE.ORG link : CVE-2012-0554

JSON object : View

Products Affected

oracle

fusion_middleware

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-0554", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-05-03T18:55:01.667", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21660640", "source": "secalert_us@oracle.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/53069", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id?1026949", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers to affect confidentiality, integrity, and availability, related to Outside In Image Export SDK, a different vulnerability than CVE-2012-0555, CVE-2012-0556, and CVE-2012-0557."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Oracle Outside In Technology component en Oracle Fusion Middleware 8.3.5 y 8.3.7 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad, relacionados con Outside In Image Export SDK, una vulnerabilidad diferente a CVE-2012-0555, CVE-2012-0556 y CVE-2012-0557."}], "lastModified": "2017-12-07T02:29:09.477", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:8.3.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA5EE411-1F96-4BAC-931B-50A214E57D04"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85A2AD03-E0CC-47CA-98B2-2268B7597657"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}