CVE-2012-5065: Low severity Oracle Fusion Middleware vulnerability

Published Oct 17, 2012

Updated

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker.

Affected Software

11 affected components

Oracle Fusion Middleware=6.1

Oracle Fusion Middleware=6.2

Oracle Fusion Middleware=6.3

Oracle Fusion Middleware=7.0

Oracle Fusion Middleware=7.0.1

Oracle Fusion Middleware=7.0.2

Oracle Fusion Middleware=7.0.3

Oracle Fusion Middleware=7.5

Oracle Fusion Middleware=7.6.1

Oracle Fusion Middleware=7.6.2

Oracle Fusion Middleware=11.1.1.6.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 17, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-5065?

CVE-2012-5065 is classified as having an unspecified severity level.

How do I fix CVE-2012-5065?

To address CVE-2012-5065, it is recommended to apply the latest security patches provided by Oracle for affected versions of Fusion Middleware.

What versions of Oracle Fusion Middleware are affected by CVE-2012-5065?

CVE-2012-5065 affects Oracle Fusion Middleware versions 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0.

What type of vulnerability is CVE-2012-5065?

CVE-2012-5065 is an integrity-related vulnerability associated with the ImagePicker component.

Can local users exploit CVE-2012-5065?

Yes, local users can exploit CVE-2012-5065 through unknown vectors that affect integrity.