NVD

Id
44778  
Name
CVE-2012-3152  
Description
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the URLPARAMETER functionality allows remote attackers to read and upload arbitrary files to reports/rwservlet, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3153 to execute arbitrary code by uploading a .jsp file.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-16  
Modified Date
2014-02-06  
Seq
2012-3152  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224594 44778 CVE-2012-3152 http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/  View
224595 44778 CVE-2012-3152 http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/  View
224596 44778 CVE-2012-3152 20140127 Oracle Reports Exploit - Remote Shell/Dump Passwords  View
224597 44778 CVE-2012-3152 31253  View
224598 44778 CVE-2012-3152 MDVSA-2013:150  View
224599 44778 CVE-2012-3152 http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html  View
224600 44778 CVE-2012-3152 55955  View
224601 44778 CVE-2012-3152 http://www.youtube.com/watch?v=NinvMDOj7sM  View
224602 44778 CVE-2012-3152 fusionmiddleware-reports-cve20123152(79295)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29355 JVNDB-2012-005062 Oracle Fusion Middleware の Oracle Fusion Middleware における Report Server Component の処理に関する脆弱性 Oracle Fusion Middleware の Oracle Fusion Middleware には、Report Server Component に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。 CVE-2012-3152 56390 CVE-2012-3152 44778 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005062.html 2012-10-16 2012-10-19 View