NVD

Id
44779  
Name
CVE-2012-3153  
Description
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the PARSEQUERY function allows remote attackers to obtain database credentials via reports/rwservlet/parsequery, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3152 to execute arbitrary code by uploading a .jsp file.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-16  
Modified Date
2014-02-06  
Seq
2012-3153  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224603 44779 CVE-2012-3153 http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/  View
224604 44779 CVE-2012-3153 http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/  View
224605 44779 CVE-2012-3153 20140127 Oracle Reports Exploit - Remote Shell/Dump Passwords  View
224606 44779 CVE-2012-3153 31253  View
224607 44779 CVE-2012-3153 MDVSA-2013:150  View
224608 44779 CVE-2012-3153 http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html  View
224609 44779 CVE-2012-3153 55961  View
224610 44779 CVE-2012-3153 fusionmiddleware-reports-cve20123153(79296)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29356 JVNDB-2012-005063 Oracle Fusion Middleware の Oracle Reports Developer における Servlet の処理に関する脆弱性 Oracle Fusion Middleware の Oracle Reports Developer には、Servlet に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。 CVE-2012-3153 56391 CVE-2012-3153 44779 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005063.html 2012-10-16 2012-10-19 View