CVE-2012-1677: Medium severity Oracle Fusion Middleware vulnerability

Published Jan 17, 2013

Updated

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors.

Affected Software

46 affected components

Oracle Fusion Middleware

Oracle Fusion Middleware=6.0

Oracle Fusion Middleware=6.1

Oracle Fusion Middleware=6.2

Oracle Fusion Middleware=6.3

Oracle Fusion Middleware=7.0

Oracle Fusion Middleware=7.0.1

Oracle Fusion Middleware=7.0.2

Oracle Fusion Middleware=7.0.3

Oracle Fusion Middleware=7.5

Oracle Fusion Middleware=7.5.2

Oracle Fusion Middleware=7.6.1

Oracle Fusion Middleware=7.6.2

Oracle Fusion Middleware=8.3.2.0

Oracle Fusion Middleware=8.3.5.0

Oracle Fusion Middleware=8.3.7.0

Oracle Fusion Middleware=9.2.4

Oracle Fusion Middleware=10.0.2

Oracle Fusion Middleware=10.1

Oracle Fusion Middleware=10.1.2.3

Oracle Fusion Middleware=10.1.3.1

Oracle Fusion Middleware=10.1.3.3.2

Oracle Fusion Middleware=10.1.3.4.1

Oracle Fusion Middleware=10.1.3.4.2

Oracle Fusion Middleware=10.1.3.5

Oracle Fusion Middleware=10.1.3.5.1

Oracle Fusion Middleware=10.1.3.6.0

Oracle Fusion Middleware=10.1.4.3

Oracle Fusion Middleware=10.3.3

Oracle Fusion Middleware=10.3.4

Oracle Fusion Middleware=10.3.5

Oracle Fusion Middleware=11.1

Oracle Fusion Middleware=11.1.1

Oracle Fusion Middleware=11.1.1.1.0

Oracle Fusion Middleware=11.1.1.2.0

Oracle Fusion Middleware=11.1.1.3.0

Oracle Fusion Middleware=11.1.1.4.0

Oracle Fusion Middleware=11.1.1.5.0

Oracle Fusion Middleware=11.1.1.6.0

Oracle Fusion Middleware=11.1.1.6.2

Oracle Fusion Middleware=11.1.2.0

Oracle Fusion Middleware=27.7.2

Oracle Fusion Middleware=27.7.3

Oracle Fusion Middleware=28.2.2

Oracle Fusion Middleware=28.2.3

Oracle Fusion Middleware=28.2.4

Event History

Jan 17, 2013

CVE Published

via MITRE·01:30 AM

Data Sourced

via MITRE·01:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1677?

CVE-2012-1677 is classified with an unspecified severity level, allowing remote attackers to affect integrity through unknown vectors.

Which versions of Oracle Fusion Middleware are affected by CVE-2012-1677?

CVE-2012-1677 affects multiple versions of Oracle Fusion Middleware, including versions from 6.0 to 28.2.4.

How do I fix CVE-2012-1677?

To address CVE-2012-1677, it is recommended to apply the patches provided by Oracle for the affected versions of Fusion Middleware.

Can CVE-2012-1677 be exploited remotely?

Yes, CVE-2012-1677 can be exploited remotely by attackers due to its nature of affecting the Oracle Application Server Single Sign-On component.

Is there a workaround for CVE-2012-1677?

Currently, specific workarounds for CVE-2012-1677 are not documented, making patching the only advisable course of action.