CVE-2012-1710VulnerabilityPublished 05/25/2022Updated 10/24/2026

CVE-2012-1710: Oracle Fusion Middleware Unspecified Vulnerability

Affects Oracle Fusion MiddlewareSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/25/2022
KEV deadline: 06/15/2022
Ransomware: Used in ransomware campaigns
EPSS: 7.8% chance of exploitation in 30 days – higher than 94% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2012-1710 (opens in a new tab)

Description

CVE-2012-1710 is an unspecified vulnerability in the Oracle WebCenter Forms Recognition component of Oracle Fusion Middleware. It allows remote attackers to impact confidentiality, integrity, and availability through unknown vectors related to the Designer component. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided.

Summary

This vulnerability in Oracle Fusion Middleware's WebCenter Forms Recognition component involves unspecified security weaknesses related to the Designer functionality. The exact attack vectors and technical details are not disclosed. The flaw permits remote attackers to compromise confidentiality, integrity, and availability of the affected system. Exploitation has been observed in real-world attacks, including ransomware campaigns.

Impact

The vulnerability enables remote attackers to affect the confidentiality, integrity, and availability of Oracle Fusion Middleware deployments using the WebCenter Forms Recognition component. It has been exploited in the wild and leveraged in ransomware campaigns, indicating a significant risk to affected organizations.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of specific patch or workaround information, organizations should monitor Oracle's official advisories for updates and apply any released fixes promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:49:14 UTC

References

Related threats