CVE-2012-0518 — VulnIntel

CVE-2012-0518

MEDIUM

KEV

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

StatusAnalyzed

설명

Score Summary

CVSS Score: 4.7
Version: 3.1
VPI: 70.50
Why this VPI (explainable, experimental)
VPI breakdown
Impact 47.00
Exploitation signal(KEV listed) ×1.50
VPI 70.50
VPI formula vpi-v1
EPSS: 4.7%
(상위 90.7%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Changed
No Confidentiality Impact
Low Integrity Impact
No Availability Impact

Details

Published: 10/16/2012(14 years ago)
Modified: 04/22/2026(3 months ago)
Source: KEV, NVD
Products: 1

CISA KEV Listing

Vendor / Project: Oracle
Product: Fusion Middleware

Date Added: 03/28/2022
Due Date: 04/18/2022Overdue 1557d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished10/16/2012
CISA KEVKEV Listed03/28/2022
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	4.7	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N	04/20/2026
NVDNIST	2.0	4.3

CWE Weakness Classification

CWE-601
NVD
Secondary

References (3)

Affected Products (1)

Impact	47.00
Exploitation signal(KEV listed)	×1.50
VPI	70.50