Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-0518

56
FAUCET Score

CVE-2012-0518 is an unspecified integrity vulnerability in the Oracle Application Server Single Sign-On component of Oracle Fusion Middleware 10.1.4.3.0, related to redirects. It has a medium CVSS score of 4.7, indicating a network-based attack requiring user interaction, with a low impact on integrity. This vulnerability is actively exploited and listed in CISA's KEV catalog, despite a lack of public exploit code in Metasploit or ExploitDB. The CVE has garnered significant community discussion with 10 mentions, placing it in the top 1% of all CVEs for community attention.

Impacted Technologies

VendorProductVersion(s)CPE
10.1.4.3CPE matchmatch criteria
cpe:2.3:a:oracle:fusion_middleware:10.1.4.3:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.7MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
4.66%
Probability of exploitation in next 30 days
EPSS Percentile
90.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Added to KEV · Mar 28, 2022
This CVE's current EPSS score of 0.0466 is in the 96th percentile among its peer group of 26,209 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

oraclepatch availablevia nvd_reference
View patch

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
mandriva.com / security/advisories
Broken Link
oracle.com / technetwork/topics/security/cpuoct2012-1515893.html
PatchVendor Advisory