{"vulnerability": "CVE-2012-3152", "sightings": [{"uuid": "213eddac-d377-4edb-aeb3-8c5cc1589ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "51334796-661a-438e-8a88-61fc570ea9a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "da713a10-d6bc-4de7-a9a6-9130c6e8bb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970962", "content": "", "creation_timestamp": "2024-12-24T20:22:21.666975Z"}, {"uuid": "3f0ef7be-744a-4baf-ae56-eb0c9c055349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "c8ab2131-fc0b-417b-8066-d3955ab90330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:37.000000Z"}, {"uuid": "74f0c131-209d-4ea0-b130-1b01450f3046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:05.000000Z"}, {"uuid": "c4fe5249-d0c7-400a-bfcd-9d7e20f02593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_reports_rce.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "56aad68a-5ddc-42ac-bc33-cfc11917d811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2012-3152", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f1fb298-75c2-40c1-94a6-77d15102dd50", "content": "", "creation_timestamp": "2026-02-02T12:28:59.028631Z"}, {"uuid": "b31e384a-a0fd-4cb5-8169-a002786d66b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-3152", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/31737", "content": "", "creation_timestamp": "2014-02-18T00:00:00.000000Z"}, {"uuid": "f14c7545-ba4d-4f2f-bffb-b29244303d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "published-proof-of-concept", "source": "Telegram/aY1qw3WoeMXQQmxqdikseMRoeXDbRGSXobSkQq38kTxX6_o", "content": "", "creation_timestamp": "2026-05-15T23:00:11.000000Z"}, {"uuid": "55dbc91a-8844-48c0-8557-6274f43f7662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "published-proof-of-concept", "source": "Telegram/7cUPikWYVy9ZWytWyAxwh66xAlCEPyyOlWhVl_FYZCzkhJ4", "content": "", "creation_timestamp": "2026-05-16T03:00:05.000000Z"}, {"uuid": "6e0535d9-d3ed-4b55-a30e-dfadacd8c494", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da0b8807-970a-4616-8846-bb8e35c43c84", "content": "", "creation_timestamp": "2026-06-19T12:48:01.912511Z"}, {"uuid": "6103c7c8-e64c-4f0c-a44b-158ebaef7edd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36f8fff4-135d-4bef-a259-c7645f5f1686", "content": "", "creation_timestamp": "2026-06-23T14:04:32.415075Z"}, {"uuid": "404a8093-dce6-4689-9091-7c16266d4d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-3152", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_reports_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"miss_sudo \", \"Mekanismen \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module uses two vulnerabilities in Oracle Forms and Reports to get remote code execution\\n          on the host. The showenv url can be used to disclose information about a server. A second\\n          vulnerability that allows arbitrary reading and writing to the host filesystem can then be\\n          used to write a shell from a remote url to a known local path disclosed from the previous\\n          vulnerability.\\n\\n          The local path being accessible from an URL allows an attacker to perform the remote code\\n          execution using, for example, a .jsp shell.\\n\\n          This module was tested successfully on Windows and Oracle Forms and Reports 10.1.\", \"disclosure_date\": \"2014-01-15\", \"fullname\": \"exploit/multi/http/oracle_reports_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Oracle Forms and Reports Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/oracle_reports_rce.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/http/oracle_reports_rce\", \"references\": [\"CVE-2012-3152\", \"CVE-2012-3153\", \"OSVDB-86395\", \"OSVDB-86394\", \"EDB-31253\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux\", \"Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:06.545440Z"}]}