OSVDB ID: 86395

Title: Oracle Forms and Reports Developer Component Report Server Component Subcomponent Unspecified Remote Issue

Info

Disclosure

Oct 16, 2012

Discovery

Unknown

Dates

Exploit

Jan 30, 2014

Solution

Oct 16, 2012

Description

Oracle Forms and Reports contains a flaw that is triggered when an unspecified error occurs in the Report Server Component subcomponent of the Oracle Reports Developer component, which may allow a remote attacker to have an unspecified impact.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Public
Disclosure: Vendor Verified, Third-party Verified, Coordinated Disclosure

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Oracle has released a patch to address this vulnerability. Check the vendor advisory in the references section.

Products

Oracle Corporation

Forms and Reports

11.1.1.4
11.1.2.0

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/86395