CVE-2012-3196: Medium severity oracle e-business suite vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle Human Resources component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and availability, related to PDF generation.

Affected Software

5 affected components

Oracle E-Business Suite=11.5.10.2

Oracle E-Business Suite=12.0.6

Oracle E-Business Suite=12.1.1

Oracle E-Business Suite=12.1.2

Oracle E-Business Suite=12.1.3

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3196?

CVE-2012-3196 is considered to have a significant impact on confidentiality and availability due to its nature as an unspecified vulnerability.

What types of attacks does CVE-2012-3196 allow?

CVE-2012-3196 allows remote attackers to exploit the vulnerability potentially affecting the confidentiality and availability of data during PDF generation.

Which versions of Oracle E-Business Suite are affected by CVE-2012-3196?

CVE-2012-3196 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3.

How do I fix CVE-2012-3196?

To address CVE-2012-3196, it is important to apply the appropriate patches provided by Oracle for the affected versions.

Can CVE-2012-3196 be exploited remotely?

Yes, CVE-2012-3196 can be exploited remotely by attackers targeting the Oracle Human Resources component.