CVE-2012-3132

CVE-2012-3132 is a SQL injection vulnerability affecting multiple versions of Oracle Database Server. This flaw allows remote authenticated users to execute arbitrary SQL commands by manipulating CREATE INDEX statements with CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS. With a CVSS score of 6.5, it is considered a medium severity vulnerability, requiring authentication but having low attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or inclusion in CISA's KEV catalog, though it has received some community and media attention.