# CVE-2012-0518

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

- Page: https://www.vulneraibility.com/cve/CVE-2012-0518
- CVSS: 4.7
- Known exploited: yes, in CISA KEV since 2022-03-28; CISA due date 2022-04-18
- EPSS: 4.69% (percentile 91.9)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2025-02-10)
- Weakness: CWE-601
- Published: 2012-10-16

## Affected

- oracle:fusion_middleware

## References

- [other] http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
- [advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0518

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.