BLACKOUT MAP

Oracle · Fusion Middleware

CVE-2012-1710

Oracle Fusion Middleware Unspecified Vulnerability

Exploited in attacks Used by ransomware Critical 9.8 Attack chance: 7.8%
Share

What it is

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

CISA: Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: June 15, 2022

Added to the CISA list
May 25, 2022
Published
May 3, 2012
Severity
Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS)
7.8% in the top 5.4% of all known vulnerabilities
More details
NVD · CVE.org · CISA
All references (3)

More exploited flaws from Oracle

AddedVulnerabilityProductSeverityAttack chance
Nov 21, 2025Missing Authentication for Critical FunctionCVE-2025-61757Fusion MiddlewareCritical 9.889%
Nov 16, 2023UnspecifiedCVE-2020-2551Fusion MiddlewareCritical 9.893%
Nov 28, 2022UnspecifiedCVE-2021-35587Fusion MiddlewareCritical 9.896%
Mar 28, 2022UnspecifiedCVE-2012-0518Fusion MiddlewareMedium 4.74.7%
Nov 3, 2021UnspecifiedCVE-2012-3152Fusion MiddlewareCritical 9.199%
Aug 24, 2026Improper Access ControlCVE-2026-21962HTTP Server and Oracle Weblogic Server Proxy Plug-inCritical 10.073%
Jul 15, 2026Improper Privilege ManagementCVE-2026-46817E-Business SuiteCritical 9.812%
Jun 12, 2026PeopleSoft Enterprise PeopleTools Missing Authentication for Critical FunctionCVE-2026-35273used by ransomware PeopleSoft Enterprise PeopleToolsCritical 9.897%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.