CVE-2010-3595: High severity Oracle Fusion Middleware vulnerability

Published Jan 19, 2011

Updated

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).

Affected Software

2 affected components

Oracle Fusion Middleware=10.1.3.5

Oracle Fusion Middleware=10.1.3.4

Event History

Jan 19, 2011

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3595?

CVE-2010-3595 has been classified as a vulnerability that threatens confidentiality in Oracle Document Capture.

How do I fix CVE-2010-3595?

To address CVE-2010-3595, update Oracle Fusion Middleware to the latest version provided by Oracle.

What versions of Oracle Fusion Middleware are affected by CVE-2010-3595?

CVE-2010-3595 impacts Oracle Fusion Middleware versions 10.1.3.4 and 10.1.3.5.

Can CVE-2010-3595 be exploited remotely?

Yes, CVE-2010-3595 can be exploited remotely by attackers through unspecified vectors.

What component of Oracle Fusion Middleware is impacted by CVE-2010-3595?

The vulnerability CVE-2010-3595 specifically affects the Oracle Document Capture component.