PT-2012-3495 · Oracle · Oracle Clinical Remote Data Capture Option

Published 2012-07-17 · Updated 2017-08-29 · CVE-2012-1743

Positive Technologies (AI Summary)

CVSS v2.0

2.8

Low

Base vector

AV:N/AC:M/Au:M/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Clinical Remote Data Capture Option versions 4.6.0.x, 4.6.2, 4.6.3

Description The issue affects confidentiality and is related to HTML Surround. It allows remote authenticated users to exploit the vulnerability.

Recommendations For versions 4.6.0.x, 4.6.2, and 4.6.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-1743

Affected Products

Oracle Clinical Remote Data Capture Option

References · 7

• http://oracle.com/technetwork/topics/security/cpujul2012-392727.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1743 · Security Note
• http://osvdb.org/83972 · Note
• http://securitytracker.com/id?1027266 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77040 · Note
• http://securityfocus.com/bid/54563 · Note