CVE-2012-1710: Oracle Fusion Middleware WebCenter Forms Recognition unspecified flaw

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: medium.

critical priorityCVSS 9.8 with network, unauthenticated, no-interaction access plus CISA KEV listing and known ransomware use make this an urgent remediation target despite the thin technical description.

What it is

CVE-2012-1710 is an unspecified vulnerability in the Oracle WebCenter Forms Recognition component of Oracle Fusion Middleware 10.1.3.5, reachable through unknown vectors related to Designer. It is distinct from CVE-2012-1709. Because the flaw is unspecified, the exact root cause is not documented, but the record rates it critical and CISA lists it as exploited.

Impact

A successful attack can affect confidentiality, integrity and availability, meaning an unauthenticated remote attacker could read, alter or disrupt data handled by the affected component. The full scope of what is exposed is not described in the record.

Attack surface

The CVSS vector is network-reachable with no privileges and no user interaction, so the component is exposed to remote unauthenticated requests. The description gives no further detail on the specific interface or protocol involved.

Exploitation

CISA added this CVE to the Known Exploited Vulnerabilities catalog on 2022-05-25 with a due date of 2022-06-15 and flags known ransomware campaign use. EPSS puts 30-day exploitation probability at about 11.5 percent (95.8th percentile).

What to do

• Apply the Oracle Critical Patch Update referenced in the vendor advisory (cpuapr2012-366314) or a later supported patch level.
• If WebCenter Forms Recognition is not required, disable or remove the component and restrict network access to it.
• Place the affected Fusion Middleware deployment behind access controls so only trusted networks and users can reach it.
• Monitor CISA KEV guidance and vendor advisories for updated remediation instructions, since the vulnerability details are unspecified.

Detection

• Review web and application logs for anomalous requests to WebCenter Forms Recognition or Designer endpoints from unexpected sources.
• Alert on exploitation attempts or post-exploitation behavior tied to known ransomware activity, given the KEV ransomware flag.
• Inventory internet-facing or broadly reachable Fusion Middleware 10.1.3.5 instances and confirm patch status against the vendor advisory.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.