{"id":"CVE-2012-1710","kind":"vulnerability","aliases":["CVE-2012-1710"],"related":[],"title":"Oracle Fusion Middleware: Oracle Fusion Middleware Unspecified Vulnerability","description":"Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.\n\nCISA required action: Apply updates per vendor instructions.","summary":"An unspecified flaw in the Oracle WebCenter Forms Recognition component of Oracle Fusion Middleware lets remote attackers affect confidentiality, integrity, and availability through unknown vectors related to Designer. CISA lists it in the Known Exploited Vulnerabilities catalog, so attacks are happening in the wild.","severity":"critical","cvss":9.8,"epss":0.07826,"exploited":true,"exploited_at":"2022-05-25T00:00:00+00:00","products":[{"name":"Oracle Fusion Middleware","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","fusion-middleware","oracle","ransomware","runtime","webcenter-forms-recognition"],"not_affected_if":["component-not-installed"],"how_to_check":null,"fix":"Apply the Oracle Critical Patch Update fix for WebCenter Forms Recognition per vendor instructions; the exact patch level is unknown from these sources.","status":"open","published_at":"2012-05-03T22:55:02+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:15:34+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-23T21:15:34Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Oracle Critical Patch Update fix for WebCenter Forms Recognition per vendor instructions; the exact patch level is unknown from these sources.","reach":"network","impact":"high","summary":"An unspecified flaw in the Oracle WebCenter Forms Recognition component of Oracle Fusion Middleware lets remote attackers affect confidentiality, integrity, and availability through unknown vectors related to Designer. CISA lists it in the Known Exploited Vulnerabilities catalog, so attacks are happening in the wild.","category":"runtime","who_cares":["oracle","fusion-middleware","webcenter-forms-recognition"],"confidence":0.5,"needs_auth":"unknown","worst_case":"remote attacker affects confidentiality, integrity and availability of the server","analyst_note":"Find the Oracle CPU advisory for CVE-2012-1710 to confirm affected versions, patch level and vectors; the sources give none.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["component-not-installed"],"user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000492,"input_tokens":2871,"output_tokens":409,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1710':11A,14A '-2012':10A,13A 'action':103C 'affect':46B,90C 'allow':86C 'appli':104C 'attack':45B,67B,88C 'avail':50B,94C 'catalog':65B 'cisa':57B,101C 'compon':38B,81C 'confidenti':47B,91C 'cve':9A,12A 'design':56B,100C 'exploit':18B,63B 'flaw':31B 'form':27B,36B,79C 'fusion':2A,5A,16A,20B,41B,84C 'fusion-middlewar':19B 'happen':69B 'instruct':108C 'integr':48B,92C 'known':62B 'let':43B 'list':58B 'middlewar':3A,6A,21B,42B,85C 'middleware':17A 'oracl':1A,4A,22B,34B,40B,77C,83C 'oracle':15A 'per':106C 'ransomwar':23B 'recognit':28B,37B,80C 'relat':54B,98C 'remot':44B,87C 'requir':102C 'runtim':24B 'unknown':52B,96C 'unspecifi':7A,30B,73C 'updat':105C 'vector':53B,97C 'vendor':107C 'via':95C 'vulner':8A,64B,74C 'webcent':26B,35B,78C 'webcenter-forms-recognit':25B 'wild':72B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2012-05-03T22:55:02+00:00","kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2012-1710","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1710","severity":null,"published_at":"2022-05-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T13:39:31+00:00","note":null},{"source":"epss","external_id":"CVE-2012-1710","url":"https://api.first.org/data/v1/epss?cve=CVE-2012-1710","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2012-1710","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1710","severity":null,"published_at":"2012-05-03T22:55:02+00:00","modified_at":"2026-10-01T20:17:14+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}