CVE-2012-3153

🗓️ 16 Oct 2012 23:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov👁 317 Views🌐 WEB

Unspecified vulnerability in Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet

Reporter	Title	Published	Views	Family All 33
GithubExploit	Exploit for CVE-2012-3152	28 Jan 201419:39	–	githubexploit
GithubExploit	Exploit for CVE-2012-3152	15 May 202620:47	–	githubexploit
zdt	Oracle Forms and Reports 11.1 - Remote Exploit	29 Jan 201400:00	–	zdt
zdt	Oracle Reports Developer Version Release 9i to 10gr2 Database Disclosure	29 Jan 201400:00	–	zdt
zdt	Oracle Forms / Reports Remote Code Execution Exploit	18 Feb 201400:00	–	zdt
attackerkb	CVE-2012-3153	16 Oct 201200:00	–	attackerkb
attackerkb	CVE-2012-3152	16 Oct 201200:00	–	attackerkb
Circl	CVE-2012-3153	29 May 201815:50	–	circl
Check Point Advisories	Oracle Fusion Middleware Showmap Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)	6 Feb 201400:00	–	checkpoint_advisories
Check Point Advisories	Oracle Fusion Middleware Showenv Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)	6 Feb 201400:00	–	checkpoint_advisories

NVD

Node

oracle fusion_middlewareMatch11.1.1.4.0

oracle fusion_middlewareMatch11.1.1.6.0

oracle fusion_middlewareMatch11.1.2.0

Source	Link
seclists	www.seclists.org/fulldisclosure/2014/Jan/186
securityfocus	www.securityfocus.com/bid/55961
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/79296
blog	www.blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/
blog	www.blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/
exploit-db	www.exploit-db.com/exploits/31253
oracle	www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
mandriva	www.mandriva.com/security/advisories

Parameter	Position	Path	Description
report	query param	/reports/rwservlet	Unauthenticated file write via rwservlet to upload a JSP payload (CVE-2012-3152/3153)
desformat	query param	/reports/rwservlet	Unauthenticated file write via rwservlet to upload a JSP payload (CVE-2012-3152/3153)
destype	query param	/reports/rwservlet	Unauthenticated file write via rwservlet to upload a JSP payload (CVE-2012-3152/3153)
JOBTYPE	query param	/reports/rwservlet	Unauthenticated file write via rwservlet to upload a JSP payload (CVE-2012-3152/3153)
URLPARAMETER	query param	/reports/rwservlet	Unauthenticated file write via rwservlet to upload a JSP payload (CVE-2012-3152/3153)
server	query param	/reports/rwservlet/showenv	Showenv endpoint reveals server information and credentials
authid	query param	/reports/rwservlet/showenv	Showenv endpoint reveals server information and credentials
<keymap>	query param	/reports/rwservlet/parsequery	Parsequery endpoint accepts a keymap via query and enables credential dumping
report	query param	/reports/rwservlet?report=test.rdf+desformat=html+destype=cache+JOBTYPE=rwurl+URLPARAMETER='file:///'	Vulnerability check for RWServlet URLPARAMETER-based SSRF/file read (CVE-2012-3153)
desformat	query param	/reports/rwservlet?report=test.rdf+desformat=html+destype=cache+JOBTYPE=rwurl+URLPARAMETER='file:///'	Vulnerability check for RWServlet URLPARAMETER-based SSRF/file read (CVE-2012-3153)

16 Jun 2026 23:42Current

8.5High risk

Vulners AI Score8.5

CVSS 26.4

EPSS0.9822

In Wild