CVE-2010-3599
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。 Oracle Fusion Middleware 10.1.3.4和10.1.3.5版本中的Oracle Document Capture组件中存在未明漏洞。远程攻击者可借助与Import Server有关的未知向量影响完整性和可用性。
Public Exploits 1
ExploitDB · 1
EDB-16052 [remote]
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-3599
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite arbitrary files and execute arbitrary code via a full pathname in the first argument to the WriteJPG method in the NCSECWLib ActiveX control.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Oracle Fusion Middleware Document Capture组件未明漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。 Oracle Fusion Middleware 10.1.3.4和10.1.3.5版本中的Oracle Document Capture组件中存在未明漏洞。远程攻击者可借助与Import Server有关的未知向量影响完整性和可用性。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-3599
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-3599
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-3599 (7)
Other References for CVE-2010-3599 (1)
-
http://dsecrg.com/pages/vul/show.php?id=306 x_refsource_MISC
Same Patch Batch · n/a · 2011-01-19 · 69 CVEs total
| CVE-2010-3600 | Oracle Database Server Client System Analyzer组件未明漏洞 | |
| CVE-2011-0427 | Tor堆缓冲区溢出漏洞 | |
| CVE-2011-0490 | Tor Libevent日志处理器Libevent通话设计错误漏洞 | |
| CVE-2011-0016 | Tor内存管理敏感信息泄露漏洞 | |
| CVE-2010-4418 | Oracle PeopleSoft和JDEdwards PeopleSoft Enterprise PeopleTool组件未明漏洞 | |
| CVE-2010-4417 | Oracle Fusion Middleware Beehive组件未明漏洞 | |
| CVE-2010-4416 | Oracle Fusion Middleware Oracle GoldenGate Veridata组件未明漏洞 | |
| CVE-2010-4415 | Oracle Solaris未明漏洞 | |
| CVE-2010-4414 | Oracle VM VirtualBox未明漏洞 | |
| CVE-2010-4413 | Oracle Database Server Scheduler Agent组件未明漏洞 | |
| CVE-2010-4419 | Oracle PeopleSoft和JDEdwards PeopleSoft Enterprise CRM组件未明漏洞 | |
| CVE-2010-3598 | Oracle Fusion Middleware Oracle Document Capture组件未明漏洞 | |
| CVE-2010-3597 | Oracle Fusion Middleware Oracle Outside In Technology组件未明漏洞 | |
| CVE-2010-3596 | Oracle Secure Backup mod_ssl组件未明漏洞 | |
| CVE-2010-3595 | Oracle Fusion Middleware Oracle Document Capture组件未明安全漏洞 | |
| CVE-2010-3594 | Oracle Enterprise Manager Grid Control Real User Experience Insight组件未明漏洞 | |
| CVE-2010-3593 | Oracle Industry Applications多个版本Health Sciences - Oracle Argus Safety组件未明漏洞 | |
| CVE-2010-3592 | Oracle Fusion Middleware Oracle Document Capture组件未明漏洞 | |
| CVE-2010-3591 | Oracle Fusion Middlewar Document Capture组件未明漏洞 | |
| CVE-2010-3590 | Oracle Database Server Oracle Spatial组件未明漏洞 |
Showing top 20 of 69 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2010-3599
No comments yet