CERTA-2012-AVI-393
Vulnerability from certfr_avis

Soixante-dix sept vulnérabilités ont été corrigées dans les produits Oracle. Elles concernent de nombreux composants et peuvent pour certaines être exploitées à distance. Le CERTA recommande de mettre à jour vos produits Oracle dès que possible.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
Oracle N/A Oracle E-Business Suite Release 12 versions 12.0.4, 12.0.6, 12.1.1, 12.1.2 et 12.1.3 ;
Oracle N/A Oracle Identity Management 10g version 10.1.4.3 ;
Oracle N/A Oracle Sun Product Suite ;
Oracle N/A Oracle Application Server 10g Release 3 version 10.1.3.5 ;
Oracle N/A Oracle Database 10g Release 2 versions 10.2.0.3, 10.2.0.4 et 10.2.0.5 ;
Oracle N/A Oracle Siebel CRM versions 8.1.1 et 8.2.2 ;
Oracle PeopleSoft Oracle PeopleSoft Enterprise HRMS versions 9.0 et 9.1 ;
Oracle N/A Oracle Transportation Management versions 5.5.06, 6.0, 6.1 et 6.2 ;
Oracle N/A Oracle JRockit versions R28.2.3 et antérieures, R27.7.2 et antérieures ;
Oracle N/A Enterprise Manager Grid Control 11g Release 1 version 11.1.0.1 ;
Oracle N/A Oracle Secure Backup versions 10.3.0.3 et 10.4.0.1 ;
Oracle N/A Oracle AutoVue versions 20.0.2 et 20.1 ;
Oracle N/A Oracle Outside In Technology versions 8.3.5 et 8.3.7;
Oracle N/A Enterprise Manager Plugin pour Database 12c Release 1 versions 12.1.0.1 et 12.1.0.2 ;
Oracle N/A Oracle Fusion Middleware 11g Release 2 version 11.1.2.0 ;
Oracle N/A Oracle Map Viewer versions 10.1.3.1, 11.1.1.5 et 11.1.1.6 ;
Oracle N/A Oracle Clinical Remote Data Capture Option versions 4.6, 4.6.2 et 4.6.3 ;
Oracle N/A Oracle Database 11g Release 2 versions 11.2.0.2 et 11.2.0.3 ;
Oracle N/A Enterprise Manager Grid Control 10g Release 1 version 10.2.0.5 ;
Oracle PeopleSoft Oracle PeopleSoft Enterprise PeopleTools versions 8.50, 8.51 et 8.52 ;
Oracle N/A Oracle E-Business Suite Release 11i version 11.5.10.2 ;
Oracle N/A Hyperion BI+ version 11.1.1.x ;
Oracle N/A Oracle Fusion Middleware 11g Release 1 versions 11.1.1.5 et 11.1.1.6 ;
Oracle N/A Oracle Database 11g Release 1 version 11.1.0.7 ;
Oracle MySQL Oracle MySQL Server versions 5.1 et 5.5.

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle E-Business Suite Release 12 versions 12.0.4, 12.0.6, 12.1.1, 12.1.2 et 12.1.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Identity Management 10g version 10.1.4.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Sun Product Suite ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Application Server 10g Release 3 version 10.1.3.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database 10g Release 2 versions 10.2.0.3, 10.2.0.4 et 10.2.0.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Siebel CRM versions 8.1.1 et 8.2.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle PeopleSoft Enterprise HRMS versions 9.0 et 9.1 ;",
      "product": {
        "name": "PeopleSoft",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Transportation Management versions 5.5.06, 6.0, 6.1 et 6.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle JRockit versions R28.2.3 et ant\u00e9rieures, R27.7.2 et ant\u00e9rieures ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Enterprise Manager Grid Control 11g Release 1 version 11.1.0.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Secure Backup versions 10.3.0.3 et 10.4.0.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle AutoVue versions 20.0.2 et 20.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Outside In Technology versions 8.3.5 et 8.3.7;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Enterprise Manager Plugin pour Database 12c Release 1 versions 12.1.0.1 et 12.1.0.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Fusion Middleware 11g Release 2 version 11.1.2.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Map Viewer versions 10.1.3.1, 11.1.1.5 et 11.1.1.6 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Clinical Remote Data Capture Option versions 4.6, 4.6.2 et 4.6.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database 11g Release 2 versions 11.2.0.2 et 11.2.0.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Enterprise Manager Grid Control 10g Release 1 version 10.2.0.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle PeopleSoft Enterprise PeopleTools versions 8.50, 8.51 et 8.52 ;",
      "product": {
        "name": "PeopleSoft",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle E-Business Suite Release 11i version 11.5.10.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Hyperion BI+ version 11.1.1.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Fusion Middleware 11g Release 1 versions 11.1.1.5 et 11.1.1.6 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle Database 11g Release 1 version 11.1.0.7 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Oracle MySQL Server versions 5.1 et 5.5.",
      "product": {
        "name": "MySQL",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-3118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3118"
    },
    {
      "name": "CVE-2012-1770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1770"
    },
    {
      "name": "CVE-2011-3192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3192"
    },
    {
      "name": "CVE-2012-1773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1773"
    },
    {
      "name": "CVE-2012-3124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3124"
    },
    {
      "name": "CVE-2012-1735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1735"
    },
    {
      "name": "CVE-2012-3110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3110"
    },
    {
      "name": "CVE-2012-1736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1736"
    },
    {
      "name": "CVE-2012-1759",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1759"
    },
    {
      "name": "CVE-2012-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1767"
    },
    {
      "name": "CVE-2012-1766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1766"
    },
    {
      "name": "CVE-2012-1754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1754"
    },
    {
      "name": "CVE-2012-3114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3114"
    },
    {
      "name": "CVE-2012-1730",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1730"
    },
    {
      "name": "CVE-2012-1739",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1739"
    },
    {
      "name": "CVE-2012-1765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1765"
    },
    {
      "name": "CVE-2012-1727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1727"
    },
    {
      "name": "CVE-2012-3115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3115"
    },
    {
      "name": "CVE-2012-3113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3113"
    },
    {
      "name": "CVE-2012-1740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1740"
    },
    {
      "name": "CVE-2012-3121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3121"
    },
    {
      "name": "CVE-2012-1689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1689"
    },
    {
      "name": "CVE-2012-1769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1769"
    },
    {
      "name": "CVE-2012-1768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1768"
    },
    {
      "name": "CVE-2012-1742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1742"
    },
    {
      "name": "CVE-2012-1762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1762"
    },
    {
      "name": "CVE-2012-3130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3130"
    },
    {
      "name": "CVE-2012-1732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1732"
    },
    {
      "name": "CVE-2012-3134",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3134"
    },
    {
      "name": "CVE-2012-3126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3126"
    },
    {
      "name": "CVE-2012-1747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1747"
    },
    {
      "name": "CVE-2012-1733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1733"
    },
    {
      "name": "CVE-2012-3117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3117"
    },
    {
      "name": "CVE-2012-1744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1744"
    },
    {
      "name": "CVE-2012-1760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1760"
    },
    {
      "name": "CVE-2012-1772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1772"
    },
    {
      "name": "CVE-2012-3106",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3106"
    },
    {
      "name": "CVE-2011-3562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3562"
    },
    {
      "name": "CVE-2012-3128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3128"
    },
    {
      "name": "CVE-2012-1715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1715"
    },
    {
      "name": "CVE-2012-3135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3135"
    },
    {
      "name": "CVE-2012-1728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1728"
    },
    {
      "name": "CVE-2012-1757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1757"
    },
    {
      "name": "CVE-2012-1749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1749"
    },
    {
      "name": "CVE-2012-0563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0563"
    },
    {
      "name": "CVE-2012-1748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1748"
    },
    {
      "name": "CVE-2012-1687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1687"
    },
    {
      "name": "CVE-2012-1758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1758"
    },
    {
      "name": "CVE-2012-3112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3112"
    },
    {
      "name": "CVE-2012-1741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1741"
    },
    {
      "name": "CVE-2012-3109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3109"
    },
    {
      "name": "CVE-2012-1752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1752"
    },
    {
      "name": "CVE-2012-1729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1729"
    },
    {
      "name": "CVE-2012-1771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1771"
    },
    {
      "name": "CVE-2012-3131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3131"
    },
    {
      "name": "CVE-2012-0540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0540"
    },
    {
      "name": "CVE-2012-1761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1761"
    },
    {
      "name": "CVE-2011-3368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3368"
    },
    {
      "name": "CVE-2012-1738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1738"
    },
    {
      "name": "CVE-2012-3125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3125"
    },
    {
      "name": "CVE-2008-4609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4609"
    },
    {
      "name": "CVE-2012-1756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1756"
    },
    {
      "name": "CVE-2012-1737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1737"
    },
    {
      "name": "CVE-2012-1764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1764"
    },
    {
      "name": "CVE-2012-3111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3111"
    },
    {
      "name": "CVE-2012-3107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3107"
    },
    {
      "name": "CVE-2012-1753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1753"
    },
    {
      "name": "CVE-2012-3116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3116"
    },
    {
      "name": "CVE-2011-4358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4358"
    },
    {
      "name": "CVE-2011-4317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4317"
    },
    {
      "name": "CVE-2012-1734",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1734"
    },
    {
      "name": "CVE-2012-1745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1745"
    },
    {
      "name": "CVE-2001-0323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2001-0323"
    },
    {
      "name": "CVE-2011-4885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4885"
    },
    {
      "name": "CVE-2011-2699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2699"
    },
    {
      "name": "CVE-2012-3120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3120"
    },
    {
      "name": "CVE-2012-3108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3108"
    },
    {
      "name": "CVE-2012-1750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1750"
    },
    {
      "name": "CVE-2012-3127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3127"
    },
    {
      "name": "CVE-2012-1746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1746"
    },
    {
      "name": "CVE-2012-3122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3122"
    },
    {
      "name": "CVE-2012-3119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3119"
    },
    {
      "name": "CVE-2012-3129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3129"
    },
    {
      "name": "CVE-2012-3123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3123"
    },
    {
      "name": "CVE-2011-0419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0419"
    },
    {
      "name": "CVE-2012-1743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1743"
    },
    {
      "name": "CVE-2012-1731",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1731"
    }
  ],
  "initial_release_date": "2012-07-18T00:00:00",
  "last_revision_date": "2012-07-18T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2012-392727 du 17 juillet    2012 :",
      "url": "http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html"
    }
  ],
  "reference": "CERTA-2012-AVI-393",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-07-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Soixante-dix sept vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits\n\u003cspan class=\"textit\"\u003eOracle\u003c/span\u003e. Elles concernent de nombreux\ncomposants et peuvent pour certaines \u00eatre exploit\u00e9es \u00e0 distance. Le\nCERTA recommande de mettre \u00e0 jour vos produits \u003cspan\nclass=\"textit\"\u003eOracle\u003c/span\u003e d\u00e8s que possible.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Oracle",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2012-392727 du 17 juillet 2012",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…