Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

CVE-2012-1710

critical CISA KEV

Oracle Fusion Middleware Unspecified Vulnerability

Vendor / product: Oracle — Fusion Middleware

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

CVSS
9.8
9.8 (CVSS v3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2012-05-03 22:55
Modified: 2026-10-01 20:17
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-27 07:07 UTC
Exploitation
Listed in CISA KEV
Added 2022-05-25 · due 2022-06-15
Known ransomware use: Known

Required action (CISA)

Apply updates per vendor instructions.

Affected products

oracle / fusion_middleware 10.1.3.5

Weakness classification (CWE)

NVD-CWE-noinfo

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Vendor advisory: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
Vendor advisory: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
Patch / mitigation: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
Patch / mitigation: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html

References

Data sources

CISA KEV — fetched 2026-10-27 06:50 UTC · record ↗
NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs