CVE-2012-3185: Medium severity oracle fusion middleware vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a different vulnerability than CVE-2012-3183 and CVE-2012-3186.

Affected Software

11 affected components

Oracle Fusion Middleware=6.1

Oracle Fusion Middleware=6.2

Oracle Fusion Middleware=6.3

Oracle Fusion Middleware=11.1.1.6.0

Oracle Fusion Middleware=7.0

Oracle Fusion Middleware=7.0.1

Oracle Fusion Middleware=7.0.2

Oracle Fusion Middleware=7.0.3

Oracle Fusion Middleware=7.5

Oracle Fusion Middleware=7.6.1

Oracle Fusion Middleware=7.6.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3185?

CVE-2012-3185 has been classified with a severity that could allow significant impacts on confidentiality and integrity for affected users.

How do I fix CVE-2012-3185?

To fix CVE-2012-3185, you should apply the latest security patches provided by Oracle for the affected versions of Oracle Fusion Middleware.

Who is affected by CVE-2012-3185?

CVE-2012-3185 affects remote authenticated users of Oracle Fusion Middleware versions 6.1 through 11.1.1.6.0.

What components are vulnerable in CVE-2012-3185?

CVE-2012-3185 specifically impacts the Advanced UI component of Oracle WebCenter Sites within Oracle Fusion Middleware.

What types of attacks can CVE-2012-3185 allow?

CVE-2012-3185 can potentially allow attackers to manipulate or gain unauthorized access to sensitive data, affecting both confidentiality and data integrity.