Vulnerability Details : CVE-2012-1743
Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround.
Exploit prediction scoring system (EPSS) score for CVE-2012-1743
Probability of exploitation activity in the next 30 days: 0.18%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 54 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-1743
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
2.8
|
LOW | AV:N/AC:M/Au:M/C:P/I:N/A:N |
5.5
|
2.9
|
NIST |
References for CVE-2012-1743
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/77040
Oracle Clinical Remote Data Capture Option HTML Surround information disclosure CVE-2012-1743 Vulnerability Report
-
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
Oracle Critical Patch Update - July 2012Vendor Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
mandriva.com
-
http://www.securitytracker.com/id?1027266
Oracle Industry Applications Clinical Remote Data Capture Option Bug Lets Remote Authenticated Users Partially Access Data - SecurityTracker
-
http://www.securityfocus.com/bid/54563
Oracle Clinical Remote Data Capture Option CVE-2012-1743 Remote Security Vulnerability
Products affected by CVE-2012-1743
- cpe:2.3:a:oracle:industry_applications:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:industry_applications:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:industry_applications:4.6.3:*:*:*:*:*:*:*