Read the docs
TI-2012-01465 Aliases CVE-2012-1677GHSA-rfrq-53rf-wg4m

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in…

Priority LOW 22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors.

Why it matters now

EPSS 0.00985 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 46

CPEVersionsRoleVendor
cpe:2.3:a:oracle:fusion_middleware:-:*:*:*:*:*:*:*not specified by NVDVulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:6.0:*:*:*:*:*:*:*6.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:6.1:*:*:*:*:*:*:*6.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:6.2:*:*:*:*:*:*:*6.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:6.3:*:*:*:*:*:*:*6.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.0:*:*:*:*:*:*:*7.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.0.1:*:*:*:*:*:*:*7.0.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.0.2:*:*:*:*:*:*:*7.0.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.0.3:*:*:*:*:*:*:*7.0.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.5:*:*:*:*:*:*:*7.5VulnerableOracle
  • cpe:2.3:a:oracle:fusion_middleware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Oracle
Show 36 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:fusion_middleware:7.5.2:*:*:*:*:*:*:*7.5.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.6.1:*:*:*:*:*:*:*7.6.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:7.6.2:*:*:*:*:*:*:*7.6.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:8.3.2.0:*:*:*:*:*:*:*8.3.2.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:8.3.5.0:*:*:*:*:*:*:*8.3.5.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*8.3.7.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:*9.2.4VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:*10.0.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1:*:*:*:*:*:*:*10.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.2.3:*:*:*:*:*:*:*10.1.2.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.1:*:*:*:*:*:*:*10.1.3.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.3.2:*:*:*:*:*:*:*10.1.3.3.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.4.1:*:*:*:*:*:*:*10.1.3.4.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.4.2:*:*:*:*:*:*:*10.1.3.4.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.5:*:*:*:*:*:*:*10.1.3.5VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.5.1:*:*:*:*:*:*:*10.1.3.5.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.3.6.0:*:*:*:*:*:*:*10.1.3.6.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:*:*:*:*:*:*:*10.1.4.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:*10.3.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.3.4:*:*:*:*:*:*:*10.3.4VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:10.3.5:*:*:*:*:*:*:*10.3.5VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1:*:*:*:*:*:*:*11.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1:*:*:*:*:*:*:*11.1.1VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.1.0:*:*:*:*:*:*:*11.1.1.1.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.2.0:*:*:*:*:*:*:*11.1.1.2.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.3.0:*:*:*:*:*:*:*11.1.1.3.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.4.0:*:*:*:*:*:*:*11.1.1.4.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:*:*:*:*:*:*:*11.1.1.5.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:*11.1.1.6.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.2:*:*:*:*:*:*:*11.1.1.6.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:11.1.2.0:*:*:*:*:*:*:*11.1.2.0VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:27.7.2:*:*:*:*:*:*:*27.7.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:27.7.3:*:*:*:*:*:*:*27.7.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:28.2.2:*:*:*:*:*:*:*28.2.2VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:28.2.3:*:*:*:*:*:*:*28.2.3VulnerableOracle
cpe:2.3:a:oracle:fusion_middleware:28.2.4:*:*:*:*:*:*:*28.2.4VulnerableOracle
  • cpe:2.3:a:oracle:fusion_middleware:7.5.2:*:*:*:*:*:*:* Versions 7.5.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.6.1:*:*:*:*:*:*:* Versions 7.6.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:7.6.2:*:*:*:*:*:*:* Versions 7.6.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:8.3.2.0:*:*:*:*:*:*:* Versions 8.3.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:8.3.5.0:*:*:*:*:*:*:* Versions 8.3.5.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:* Versions 8.3.7.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:9.2.4:*:*:*:*:*:*:* Versions 9.2.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.0.2:*:*:*:*:*:*:* Versions 10.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.2.3:*:*:*:*:*:*:* Versions 10.1.2.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.1:*:*:*:*:*:*:* Versions 10.1.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.3.2:*:*:*:*:*:*:* Versions 10.1.3.3.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.4.1:*:*:*:*:*:*:* Versions 10.1.3.4.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.4.2:*:*:*:*:*:*:* Versions 10.1.3.4.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.5:*:*:*:*:*:*:* Versions 10.1.3.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.5.1:*:*:*:*:*:*:* Versions 10.1.3.5.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.3.6.0:*:*:*:*:*:*:* Versions 10.1.3.6.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:*:*:*:*:*:*:* Versions 10.1.4.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.3.3:*:*:*:*:*:*:* Versions 10.3.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.3.4:*:*:*:*:*:*:* Versions 10.3.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:10.3.5:*:*:*:*:*:*:* Versions 10.3.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1:*:*:*:*:*:*:* Versions 11.1.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.1.0:*:*:*:*:*:*:* Versions 11.1.1.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.2.0:*:*:*:*:*:*:* Versions 11.1.1.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.3.0:*:*:*:*:*:*:* Versions 11.1.1.3.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.4.0:*:*:*:*:*:*:* Versions 11.1.1.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:*:*:*:*:*:*:* Versions 11.1.1.5.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.0:*:*:*:*:*:*:* Versions 11.1.1.6.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.1.6.2:*:*:*:*:*:*:* Versions 11.1.1.6.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:11.1.2.0:*:*:*:*:*:*:* Versions 11.1.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:27.7.2:*:*:*:*:*:*:* Versions 27.7.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:27.7.3:*:*:*:*:*:*:* Versions 27.7.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:28.2.2:*:*:*:*:*:*:* Versions 28.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:28.2.3:*:*:*:*:*:*:* Versions 28.2.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:fusion_middleware:28.2.4:*:*:*:*:*:*:* Versions 28.2.4 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-1677
  2. 2026-10-03 Alias added: GHSA-rfrq-53rf-wg4m

References

Advisory 2

  • TI-2012-01498 Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-02704 Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion… KEVCVSS 3.1CRITICAL 9.1
  • TI-2012-00466 Unspecified vulnerability in the Oracle Application Server Single Sign-On component in… KEVCVSS 3.1MEDIUM 4.7
  • TI-2012-02705 Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion… CVSS 2.0MEDIUM 6.4
  • TI-2019-07411 Deserialization of untrusted data in Apache Commons Beanutils CVSS 3.1HIGH 7.3
  • TI-2013-03276 Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion… CVSS 2.0MEDIUM 5.5
See all 312 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences