CVE-2012-3152VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2012-3152: Oracle Fusion Middleware Unspecified Vulnerability

Affects Oracle Fusion MiddlewareSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 98.8% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2012-3152 (opens in a new tab)

Description

CVE-2012-3152 is an unspecified vulnerability in Oracle Fusion Middleware Reports Developer that allows remote attackers to compromise the confidentiality and integrity of affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability identified as CVE-2012-3152. This vulnerability enables remote attackers to impact the confidentiality and integrity of systems running the affected software. Details on the exact nature of the vulnerability, affected versions, and remediation are not provided in the available data. Exploitation has been observed in the wild, indicating active threat usage.

Impact

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information and unauthorized modification of data or system state, affecting the confidentiality and integrity of the system. The presence of known exploits in the wild increases the risk to affected environments.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of specific patch or mitigation details, users should consult Oracle's official security advisories for updates and apply any recommended fixes or workarounds promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 08:57:06 UTC

References

Related threats