CVE-2012-3153

🗓️ 16 Oct 2012 23:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov👁 320 Views🌐 WEB

Unspecified vulnerability in Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet

Reporter	Title	Published	Views	Family All 36
GithubExploit	Exploit for CVE-2012-3152	28 Jan 201419:39	–	githubexploit
GithubExploit	Exploit for CVE-2012-3152	15 May 202620:47	–	githubexploit
zdt	Oracle Forms and Reports 11.1 - Remote Exploit	29 Jan 201400:00	–	zdt
zdt	Oracle Reports Developer Version Release 9i to 10gr2 Database Disclosure	29 Jan 201400:00	–	zdt
zdt	Oracle Forms / Reports Remote Code Execution Exploit	18 Feb 201400:00	–	zdt
attackerkb	CVE-2012-3153	16 Oct 201200:00	–	attackerkb
attackerkb	CVE-2012-3152	16 Oct 201200:00	–	attackerkb
Circl	CVE-2012-3153	29 May 201815:50	–	circl
Check Point Advisories	Oracle Fusion Middleware Showmap Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)	6 Feb 201400:00	–	checkpoint_advisories
Check Point Advisories	Oracle Fusion Middleware Showenv Servlet Information Disclosure (CVE-2012-3152; CVE-2012-3153)	6 Feb 201400:00	–	checkpoint_advisories

NVD

Node

oracle fusion_middlewareMatch11.1.1.4.0

oracle fusion_middlewareMatch11.1.1.6.0

oracle fusion_middlewareMatch11.1.2.0

Source	Link
seclists	www.seclists.org/fulldisclosure/2014/Jan/186
securityfocus	www.securityfocus.com/bid/55961
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/79296
blog	www.blog.netinfiltration.com/2013/11/03/oracle-reports-cve-2012-3152-and-cve-2012-3153/
blog	www.blog.netinfiltration.com/2014/01/19/upcoming-exploit-release-oracle-forms-and-reports-11g/
exploit-db	www.exploit-db.com/exploits/31253
oracle	www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
mandriva	www.mandriva.com/security/advisories

Parameter	Position	Path	Description	CWE
server	query param	/reports/rwservlet/parsequery	Undocumented PARSEQUERY function that allows dumping database credentials when provided with specific keymaps.	CWE-200: Exposure of Sensitive Information to an Unauthorized User
authid	query param	/reports/rwservlet/parsequery	Undocumented PARSEQUERY function that allows dumping database credentials when provided with specific keymaps.	CWE-200: Exposure of Sensitive Information to an Unauthorized User
server	query param	/reports/rwservlet/showenv	Endpoint used to disclose environment information, including local file paths, which can facilitate LFI or shell uploads.	CWE-200: Exposure of Sensitive Information to an Unauthorized User
authid	query param	/reports/rwservlet/showenv	Endpoint used to disclose environment information, including local file paths, which can facilitate LFI or shell uploads.	CWE-200: Exposure of Sensitive Information to an Unauthorized User
report	query param	/reports/rwservlet	Vulnerable to arbitrary file read/write and SSRF via the JOBTYPE=rwurl and URLPARAMETER parameters.	CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-918: Server-Side Request Forgery (SSRF)
desformat	query param	/reports/rwservlet	Vulnerable to arbitrary file read/write and SSRF via the JOBTYPE=rwurl and URLPARAMETER parameters.	CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-918: Server-Side Request Forgery (SSRF)
destype	query param	/reports/rwservlet	Vulnerable to arbitrary file read/write and SSRF via the JOBTYPE=rwurl and URLPARAMETER parameters.	CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-918: Server-Side Request Forgery (SSRF)
desname	query param	/reports/rwservlet	Vulnerable to arbitrary file read/write and SSRF via the JOBTYPE=rwurl and URLPARAMETER parameters.	CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-918: Server-Side Request Forgery (SSRF)
JOBTYPE	query param	/reports/rwservlet	Vulnerable to arbitrary file read/write and SSRF via the JOBTYPE=rwurl and URLPARAMETER parameters.	CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-918: Server-Side Request Forgery (SSRF)
URLPARAMETER	query param	/reports/rwservlet	Vulnerable to arbitrary file read/write and SSRF via the JOBTYPE=rwurl and URLPARAMETER parameters.	CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-918: Server-Side Request Forgery (SSRF)

16 Jun 2026 23:42Current

8.5High risk

Vulners AI Score8.5

CVSS 26.4

EPSS0.9822

In Wild