CVE-2012-1710

CRITICAL CISA KEV

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

Published: May 3, 2012 Modified: Apr 21, 2026

NVD-CWE-noinfo

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

Vendor	Product	Version
oracle	fusion_middleware	10.1.3.5

GitHub Security Advisory GHSA-8c3c-9q97-wq3f

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion...

References (7)

http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html Patch, Vendor Advisory
http://www.securitytracker.com/id?1026949 Broken Link, Third Party Advisory, VDB Entry
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 Broken Link
http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html Patch, Vendor Advisory
http://www.securitytracker.com/id?1026949 Broken Link, Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1710 US Government Resource

Risk Scores

CVSS Score 9.8 / 10

EPSS Score 40.85%

Top 3% most likely to be exploited

Threat Score 81.5 / 100

CISA Known Exploited

Date Added: 2022-05-25

Due Date: 2022-06-15

Required Action:

Apply updates per vendor instructions.

Used in Ransomware Campaigns

Data Sources

NVD CISA KEV EPSS GitHub