PT-2012-4516 · Oracle · Oracle E-Business Suite

Published 2012-10-16 · Updated 2013-10-11 · CVE-2012-3148

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 12.1.3

Description The issue affects the integrity of the system, related to Wireless/WAP upload in the Oracle Field Service component. It can be exploited by remote authenticated users.

Recommendations For Oracle E-Business Suite version 12.1.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2012-3148

Affected Products

Oracle E-Business Suite

References · 3

• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3148 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2012-1515893.html · Vendor Advisory