CERTA-2012-AVI-393
Vulnerability from certfr_avis - Published: 2012-07-18 - Updated: 2012-07-18
Soixante-dix sept vulnérabilités ont été corrigées dans les produits Oracle. Elles concernent de nombreux composants et peuvent pour certaines être exploitées à distance. Le CERTA recommande de mettre à jour vos produits Oracle dès que possible.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Oracle | N/A | Oracle E-Business Suite Release 12 versions 12.0.4, 12.0.6, 12.1.1, 12.1.2 et 12.1.3 ; | ||
| Oracle | N/A | Oracle Identity Management 10g version 10.1.4.3 ; | ||
| Oracle | N/A | Oracle Sun Product Suite ; | ||
| Oracle | N/A | Oracle Application Server 10g Release 3 version 10.1.3.5 ; | ||
| Oracle | N/A | Oracle Database 10g Release 2 versions 10.2.0.3, 10.2.0.4 et 10.2.0.5 ; | ||
| Oracle | N/A | Oracle Siebel CRM versions 8.1.1 et 8.2.2 ; | ||
| Oracle | PeopleSoft | Oracle PeopleSoft Enterprise HRMS versions 9.0 et 9.1 ; | ||
| Oracle | N/A | Oracle Transportation Management versions 5.5.06, 6.0, 6.1 et 6.2 ; | ||
| Oracle | N/A | Oracle JRockit versions R28.2.3 et antérieures, R27.7.2 et antérieures ; | ||
| Oracle | N/A | Enterprise Manager Grid Control 11g Release 1 version 11.1.0.1 ; | ||
| Oracle | N/A | Oracle Secure Backup versions 10.3.0.3 et 10.4.0.1 ; | ||
| Oracle | N/A | Oracle AutoVue versions 20.0.2 et 20.1 ; | ||
| Oracle | N/A | Oracle Outside In Technology versions 8.3.5 et 8.3.7; | ||
| Oracle | N/A | Enterprise Manager Plugin pour Database 12c Release 1 versions 12.1.0.1 et 12.1.0.2 ; | ||
| Oracle | N/A | Oracle Fusion Middleware 11g Release 2 version 11.1.2.0 ; | ||
| Oracle | N/A | Oracle Map Viewer versions 10.1.3.1, 11.1.1.5 et 11.1.1.6 ; | ||
| Oracle | N/A | Oracle Clinical Remote Data Capture Option versions 4.6, 4.6.2 et 4.6.3 ; | ||
| Oracle | N/A | Oracle Database 11g Release 2 versions 11.2.0.2 et 11.2.0.3 ; | ||
| Oracle | N/A | Enterprise Manager Grid Control 10g Release 1 version 10.2.0.5 ; | ||
| Oracle | PeopleSoft | Oracle PeopleSoft Enterprise PeopleTools versions 8.50, 8.51 et 8.52 ; | ||
| Oracle | N/A | Oracle E-Business Suite Release 11i version 11.5.10.2 ; | ||
| Oracle | N/A | Hyperion BI+ version 11.1.1.x ; | ||
| Oracle | N/A | Oracle Fusion Middleware 11g Release 1 versions 11.1.1.5 et 11.1.1.6 ; | ||
| Oracle | N/A | Oracle Database 11g Release 1 version 11.1.0.7 ; | ||
| Oracle | MySQL | Oracle MySQL Server versions 5.1 et 5.5. |
References
| Title | Publication Time | Tags | |
|---|---|---|---|
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Oracle E-Business Suite Release 12 versions 12.0.4, 12.0.6, 12.1.1, 12.1.2 et 12.1.3 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Identity Management 10g version 10.1.4.3 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Sun Product Suite ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Application Server 10g Release 3 version 10.1.3.5 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database 10g Release 2 versions 10.2.0.3, 10.2.0.4 et 10.2.0.5 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Siebel CRM versions 8.1.1 et 8.2.2 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle PeopleSoft Enterprise HRMS versions 9.0 et 9.1 ;",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Transportation Management versions 5.5.06, 6.0, 6.1 et 6.2 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle JRockit versions R28.2.3 et ant\u00e9rieures, R27.7.2 et ant\u00e9rieures ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Enterprise Manager Grid Control 11g Release 1 version 11.1.0.1 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Secure Backup versions 10.3.0.3 et 10.4.0.1 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle AutoVue versions 20.0.2 et 20.1 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Outside In Technology versions 8.3.5 et 8.3.7;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Enterprise Manager Plugin pour Database 12c Release 1 versions 12.1.0.1 et 12.1.0.2 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Fusion Middleware 11g Release 2 version 11.1.2.0 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Map Viewer versions 10.1.3.1, 11.1.1.5 et 11.1.1.6 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Clinical Remote Data Capture Option versions 4.6, 4.6.2 et 4.6.3 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database 11g Release 2 versions 11.2.0.2 et 11.2.0.3 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Enterprise Manager Grid Control 10g Release 1 version 10.2.0.5 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle PeopleSoft Enterprise PeopleTools versions 8.50, 8.51 et 8.52 ;",
"product": {
"name": "PeopleSoft",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle E-Business Suite Release 11i version 11.5.10.2 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Hyperion BI+ version 11.1.1.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Fusion Middleware 11g Release 1 versions 11.1.1.5 et 11.1.1.6 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle Database 11g Release 1 version 11.1.0.7 ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Oracle MySQL Server versions 5.1 et 5.5.",
"product": {
"name": "MySQL",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2012-3118",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3118"
},
{
"name": "CVE-2012-1770",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1770"
},
{
"name": "CVE-2011-3192",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3192"
},
{
"name": "CVE-2012-1773",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1773"
},
{
"name": "CVE-2012-3124",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3124"
},
{
"name": "CVE-2012-1735",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1735"
},
{
"name": "CVE-2012-3110",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3110"
},
{
"name": "CVE-2012-1736",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1736"
},
{
"name": "CVE-2012-1759",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1759"
},
{
"name": "CVE-2012-1767",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1767"
},
{
"name": "CVE-2012-1766",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1766"
},
{
"name": "CVE-2012-1754",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1754"
},
{
"name": "CVE-2012-3114",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3114"
},
{
"name": "CVE-2012-1730",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1730"
},
{
"name": "CVE-2012-1739",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1739"
},
{
"name": "CVE-2012-1765",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1765"
},
{
"name": "CVE-2012-1727",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1727"
},
{
"name": "CVE-2012-3115",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3115"
},
{
"name": "CVE-2012-3113",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3113"
},
{
"name": "CVE-2012-1740",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1740"
},
{
"name": "CVE-2012-3121",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3121"
},
{
"name": "CVE-2012-1689",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1689"
},
{
"name": "CVE-2012-1769",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1769"
},
{
"name": "CVE-2012-1768",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1768"
},
{
"name": "CVE-2012-1742",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1742"
},
{
"name": "CVE-2012-1762",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1762"
},
{
"name": "CVE-2012-3130",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3130"
},
{
"name": "CVE-2012-1732",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1732"
},
{
"name": "CVE-2012-3134",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3134"
},
{
"name": "CVE-2012-3126",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3126"
},
{
"name": "CVE-2012-1747",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1747"
},
{
"name": "CVE-2012-1733",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1733"
},
{
"name": "CVE-2012-3117",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3117"
},
{
"name": "CVE-2012-1744",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1744"
},
{
"name": "CVE-2012-1760",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1760"
},
{
"name": "CVE-2012-1772",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1772"
},
{
"name": "CVE-2012-3106",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3106"
},
{
"name": "CVE-2011-3562",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3562"
},
{
"name": "CVE-2012-3128",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3128"
},
{
"name": "CVE-2012-1715",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1715"
},
{
"name": "CVE-2012-3135",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3135"
},
{
"name": "CVE-2012-1728",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1728"
},
{
"name": "CVE-2012-1757",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1757"
},
{
"name": "CVE-2012-1749",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1749"
},
{
"name": "CVE-2012-0563",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0563"
},
{
"name": "CVE-2012-1748",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1748"
},
{
"name": "CVE-2012-1687",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1687"
},
{
"name": "CVE-2012-1758",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1758"
},
{
"name": "CVE-2012-3112",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3112"
},
{
"name": "CVE-2012-1741",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1741"
},
{
"name": "CVE-2012-3109",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3109"
},
{
"name": "CVE-2012-1752",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1752"
},
{
"name": "CVE-2012-1729",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1729"
},
{
"name": "CVE-2012-1771",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1771"
},
{
"name": "CVE-2012-3131",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3131"
},
{
"name": "CVE-2012-0540",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0540"
},
{
"name": "CVE-2012-1761",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1761"
},
{
"name": "CVE-2011-3368",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3368"
},
{
"name": "CVE-2012-1738",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1738"
},
{
"name": "CVE-2012-3125",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3125"
},
{
"name": "CVE-2008-4609",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-4609"
},
{
"name": "CVE-2012-1756",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1756"
},
{
"name": "CVE-2012-1737",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1737"
},
{
"name": "CVE-2012-1764",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1764"
},
{
"name": "CVE-2012-3111",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3111"
},
{
"name": "CVE-2012-3107",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3107"
},
{
"name": "CVE-2012-1753",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1753"
},
{
"name": "CVE-2012-3116",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3116"
},
{
"name": "CVE-2011-4358",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4358"
},
{
"name": "CVE-2011-4317",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4317"
},
{
"name": "CVE-2012-1734",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1734"
},
{
"name": "CVE-2012-1745",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1745"
},
{
"name": "CVE-2001-0323",
"url": "https://www.cve.org/CVERecord?id=CVE-2001-0323"
},
{
"name": "CVE-2011-4885",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4885"
},
{
"name": "CVE-2011-2699",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-2699"
},
{
"name": "CVE-2012-3120",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3120"
},
{
"name": "CVE-2012-3108",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3108"
},
{
"name": "CVE-2012-1750",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1750"
},
{
"name": "CVE-2012-3127",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3127"
},
{
"name": "CVE-2012-1746",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1746"
},
{
"name": "CVE-2012-3122",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3122"
},
{
"name": "CVE-2012-3119",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3119"
},
{
"name": "CVE-2012-3129",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3129"
},
{
"name": "CVE-2012-3123",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3123"
},
{
"name": "CVE-2011-0419",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-0419"
},
{
"name": "CVE-2012-1743",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1743"
},
{
"name": "CVE-2012-1731",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-1731"
}
],
"initial_release_date": "2012-07-18T00:00:00",
"last_revision_date": "2012-07-18T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2012-392727 du 17 juillet 2012 :",
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html"
}
],
"reference": "CERTA-2012-AVI-393",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2012-07-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Soixante-dix sept vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits\n\u003cspan class=\"textit\"\u003eOracle\u003c/span\u003e. Elles concernent de nombreux\ncomposants et peuvent pour certaines \u00eatre exploit\u00e9es \u00e0 distance. Le\nCERTA recommande de mettre \u00e0 jour vos produits \u003cspan\nclass=\"textit\"\u003eOracle\u003c/span\u003e d\u00e8s que possible.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Oracle",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2012-392727 du 17 juillet 2012",
"url": null
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…