Oracle · Fusion Middleware
CVE-2012-0518
Oracle Fusion Middleware Unspecified Vulnerability
What it is
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.
CISA: Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 18, 2022
More exploited flaws from Oracle
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 21, 2025 | Missing Authentication for Critical Function | Fusion Middleware | Critical 9.8 | 89% |
| Nov 16, 2023 | Unspecified | Fusion Middleware | Critical 9.8 | 93% |
| Nov 28, 2022 | Unspecified | Fusion Middleware | Critical 9.8 | 96% |
| May 25, 2022 | Unspecified | Fusion Middleware | Critical 9.8 | 7.8% |
| Nov 3, 2021 | Unspecified | Fusion Middleware | Critical 9.1 | 99% |
| Aug 24, 2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Critical 10.0 | 73% |
| Jul 15, 2026 | Improper Privilege Management | E-Business Suite | Critical 9.8 | 12% |
| Jun 12, 2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | Critical 9.8 | 97% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.