CVE-2012-3152

Known Exploited Public Exploit

Description

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the October 2012 CPU. Oracle has not commented on claims from the original researcher that the URLPARAMETER functionality allows remote attackers to read and upload arbitrary files to reports/rwservlet, and that this issue occurs in earlier versions. NOTE: this can be leveraged with CVE-2012-3153 to execute arbitrary code by uploading a .jsp file.

9.1

CVSS

Severity: Critical

CVSS 3.1 •

CVSS 2.0 •

EPSS 91.31% Top 5%

KEV Since

Vendor Advisory mandriva.com Vendor Advisory oracle.com

Affected: n/a n/a

References

Link	Tags
http://blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/	broken link
http://www.exploit-db.com/exploits/31253	exploit vdb entry third party advisory
http://www.osvdb.org/86394	vdb entry broken link
http://www.securityfocus.com/bid/55955	vdb entry third party advisory broken link
http://www.osvdb.org/86395	vdb entry broken link
http://www.youtube.com/watch?v=NinvMDOj7sM	exploit
http://seclists.org/fulldisclosure/2014/Jan/186	third party advisory mailing list
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html	patch vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/79295	vdb entry third party advisory
http://blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/	broken link
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150	vendor advisory broken link

Frequently Asked Questions

What is the severity of CVE-2012-3152?: CVE-2012-3152 has been scored as a critical severity vulnerability.
How to fix CVE-2012-3152?: To fix CVE-2012-3152, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2012-3152 being actively exploited in the wild?: It is confirmed that CVE-2012-3152 is actively exploited. Be extra cautious if you are using vulnerable components. According to its EPSS score, there is a ~91% probability that this vulnerability will be exploited by malicious actors in the next 30 days.