CVE-2012-0582: Medium severity oracle industry applications vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674.

Affected Software

5 affected components

Oracle Industry Applications=7.7

Oracle Industry Applications=7.8

Oracle Industry Applications=8.0.0.0

Oracle Industry Applications=8.1.1.0

Oracle Industry Applications=8.2.2.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html

Event History

May 3, 2012

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0582?

CVE-2012-0582 has not been assigned a specific severity rating, but it allows remote authenticated users to potentially affect the integrity of the application.

How do I fix CVE-2012-0582?

To fix CVE-2012-0582, it is recommended to apply the latest security updates provided by Oracle for affected versions of Oracle Industry Applications.

Which versions of Oracle Industry Applications are vulnerable to CVE-2012-0582?

CVE-2012-0582 affects Oracle Industry Applications versions 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x.

What types of attacks are possible with CVE-2012-0582?

CVE-2012-0582 potentially allows remote authenticated users to exploit unknown vectors related to the Web UI of the application.

Is CVE-2012-0582 related to any other vulnerabilities?

CVE-2012-0582 is a different vulnerability than CVE-2012-1674, although both are associated with Oracle Industry Applications.