CVE-2012-3194: Medium severity oracle fusion middleware vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 10.1.3.4.2, 11.1.1.5.0, 11.1.1.6.0, and 11.1.1.6.2 allows remote attackers to affect integrity via unknown vectors related to Administration.

Affected Software

4 affected components

Oracle Fusion Middleware=10.1.3.4.2

Oracle Fusion Middleware=11.1.1.5.0

Oracle Fusion Middleware=11.1.1.6.0

Oracle Fusion Middleware=11.1.1.6.2

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3194?

CVE-2012-3194 is considered to affect the integrity of the affected Oracle BI Publisher component.

Which versions of Oracle Fusion Middleware are affected by CVE-2012-3194?

CVE-2012-3194 affects Oracle Fusion Middleware versions 10.1.3.4.2, 11.1.1.5.0, 11.1.1.6.0, and 11.1.1.6.2.

How can I mitigate the risks associated with CVE-2012-3194?

To mitigate CVE-2012-3194, it is recommended to apply the latest security patches provided by Oracle.

Are there any known attack vectors for CVE-2012-3194?

The specific attack vectors for CVE-2012-3194 are unspecified, but they relate to the Administration features of the product.

Can CVE-2012-3194 lead to unauthorized data access?

Yes, the integrity issues addressed by CVE-2012-3194 may potentially allow unauthorized access to data.