Question 1

What is CVE-2012-3139?

Accepted Answer

CVE-2012-3139 is a medium-severity software vulnerability with a CVSS score of 4.3. Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO).

Question 2

Is CVE-2012-3139 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2012-3139 affect?

Accepted Answer

Tracked products affected include E-Business Suite. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2012-3139?

Accepted Answer

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2012-3139

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information