CVE-2012-3135

Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.3 and before, and 27.7.2 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html	Vendor Advisory
http://www.securityfocus.com/bid/54494
http://www.securitytracker.com/id?1027264
https://exchange.xforce.ibmcloud.com/vulnerabilities/76993

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:fusion_middleware::::::::
	cpe:2.3:a:oracle:fusion_middleware:28.2.3:::::::*

History

No history.

Information

Published : 2012-07-17 23:55

Updated : 2017-12-01 02:29

NVD link : CVE-2012-3135

Mitre link : CVE-2012-3135

CVE.ORG link : CVE-2012-3135

JSON object : View

Products Affected

oracle

fusion_middleware

CWE

NVD-CWE-noinfo

{"id": "CVE-2012-3135", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-07-17T23:55:03.787", "references": [{"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/54494", "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id?1027264", "source": "secalert_us@oracle.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76993", "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.3 and before, and 27.7.2 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente de Oracle JRockit en Oracle Fusion Middleware v28.2.3 y anteriores, y v27.7.2 y versiones anteriores, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos.\r\n"}], "lastModified": "2017-12-01T02:29:00.317", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:fusion_middleware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "781D9FA2-160E-4F0F-8CE3-66FF903B3061", "versionEndIncluding": "27.7.2"}, {"criteria": "cpe:2.3:a:oracle:fusion_middleware:28.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CE5DB31-5E32-41FC-A022-D52CAE549E6D"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}