{"id":"CVE-2012-0518","kind":"vulnerability","aliases":["CVE-2012-0518"],"related":[],"title":"Oracle Fusion Middleware: Oracle Fusion Middleware Unspecified Vulnerability","description":"Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.","summary":"Oracle Application Server Single Sign-On in Oracle Fusion Middleware has an unspecified flaw that lets remote attackers affect data integrity. CISA lists it as actively exploited in the wild.","severity":"medium","cvss":4.7,"epss":0.04685,"exploited":true,"exploited_at":"2022-03-28T00:00:00+00:00","products":[{"name":"Oracle Fusion Middleware","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","oracle-application-server","oracle-fusion-middleware","runtime","sso"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Oracle Fusion Middleware updates per vendor instructions; the sources do not name a specific patch or version.","status":"open","published_at":"2012-10-16T23:55:03+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:19:58+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-23T21:19:58Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Oracle Fusion Middleware updates per vendor instructions; the sources do not name a specific patch or version.","reach":"internet","impact":"medium","summary":"Oracle Application Server Single Sign-On in Oracle Fusion Middleware has an unspecified flaw that lets remote attackers affect data integrity. CISA lists it as actively exploited in the wild.","category":"runtime","who_cares":["oracle-fusion-middleware","oracle-application-server","sso"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote attacker alters data integrity in the SSO component; code execution not stated","analyst_note":"Find Oracle's 2012 Critical Patch Update advisory and the affected/fixed versions for Oracle Application Server SSO; the sources give none.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000464,"input_tokens":2849,"output_tokens":359,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0518':11A,14A '-2012':10A,13A,94C '-3175':95C '10.1.4.3.0':76C 'activ':55B 'affect':48B,81C 'allow':77C 'applic':21B,30B,65C 'attack':47B,79C 'cisa':51B 'compon':71C 'cve':9A,12A,93C 'data':49B 'differ':90C 'exploit':18B,56B 'flaw':43B 'fusion':2A,5A,16A,25B,38B,74C 'integr':50B,82C 'let':45B 'list':52B 'middlewar':3A,6A,26B,39B,75C 'middleware':17A 'oracl':1A,4A,20B,24B,29B,37B,64C,73C 'oracle':15A 'oracle-application-serv':19B 'oracle-fusion-middlewar':23B 'redirect':88C 'relat':86C 'remot':46B,78C 'runtim':27B 'server':22B,31B,66C 'sign':34B,69C 'sign-on':33B,68C 'singl':32B,67C 'sso':28B 'unknown':84C 'unspecifi':7A,42B,60C 'vector':85C 'via':83C 'vulner':8A,61C,91C 'wild':59B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2012-10-16T23:55:03+00:00","kev":{"dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2012-0518","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0518","severity":null,"published_at":"2022-03-28T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T13:39:31+00:00","note":null},{"source":"epss","external_id":"CVE-2012-0518","url":"https://api.first.org/data/v1/epss?cve=CVE-2012-0518","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2012-0518","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0518","severity":null,"published_at":"2012-10-16T23:55:03+00:00","modified_at":"2026-06-16T23:37:27+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}