CVE-2012-3152

Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability allowing remote attackers to compromise confidentiality and integrity.

This unpatched vulnerability in Oracle Fusion Middleware enables remote attackers to affect system confidentiality and integrity, representing a significant compliance risk for DIB organizations relying on Oracle middleware. The failure highlights the danger of relying on vendors with high volumes of critical unauthenticated RCE vulnerabilities and slow patch cycles, requiring strict inventory management and accelerated patching schedules.

Shame score — The vulnerability remains unpatched and is actively exploited in the wild (KEV), demonstrating negligent vendor patching cycles and avoidable exposure to remote attackers.