CVE-2012-0518 Oracle Fusion Middleware Unspecified
Remote attackers can exploit an open redirect vulnerability in Oracle Application Server Single Sign-On to compromise integrity.
- Exploited in the wild
- Since 28 Mar 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2012-0518?
CVE-2012-0518 is a medium-severity vulnerability in Oracle Fusion Middleware, published on 16 Oct 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
Weakness: CWE-601
Which versions are affected by CVE-2012-0518?
It affects 1 product.
Products include Oracle Fusion Middleware.
How do I fix CVE-2012-0518?
No fix has been published for CVE-2012-0518 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 18 Apr 2022.
Is CVE-2012-0518 being exploited?
Yes. Attackers have exploited CVE-2012-0518 in the wild since at least 28 Mar 2022.
Other vulnerabilities in Oracle Fusion Middleware
Sources
Also known as GHSA-cf67-jvfv-7wxp.