[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPGrDCC_vvssvyu8DSbAODAuv_qIAVUZKGiY4yofs3v8":3,"g5a-risk:CVE-2012-3137":196},{"success":4,"data":5,"meta":194},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":63,"references":64,"referencesCount":119,"weaknesses":120,"weaknessesCount":129,"isActivelyExploited":130,"cisaInfo":15,"otxData":15,"relatedBlogPosts":131,"seoMetadata":132,"configurations":157,"relatedVendorCves":185,"notableEvents":186},"CVE-2012-3137","What is CVE-2012-3137?","The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka \"stealth password cracking vulnerability.\"","The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the se...","2012-09-21T23:55:01.23","2025-04-11T00:51:21.963",6.4,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","MEDIUM",10,4.9,0.31437,[29,29,29,29,29,29,29],"Medium",[33,38,41,44,47,50,53,57,60],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"oracle","database_server","10.2.0.3","cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":39,"criteria":40,"vulnerable":4},"10.2.0.4","cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":42,"criteria":43,"vulnerable":4},"10.2.0.5","cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":45,"criteria":46,"vulnerable":4},"11.1.0.7","cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":48,"criteria":49,"vulnerable":4},"11.2.0.2","cpe:2.3:a:oracle:database_server:11.2.0.2:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":51,"criteria":52,"vulnerable":4},"11.2.0.3","cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*",{"vendor":34,"product":54,"version":55,"criteria":56,"vulnerable":4},"primavera_p6_enterprise_project_portfolio_management","8.2","cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.2:*:*:*:*:*:*:*",{"vendor":34,"product":54,"version":58,"criteria":59,"vulnerable":4},"8.3","cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*",{"vendor":34,"product":54,"version":61,"criteria":62,"vulnerable":4},"8.4","cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*",9,[65,70,74,78,85,90,96,99,103,105,107,109,111,113,115,117],{"url":66,"source":67,"tags":68},"http:\u002F\u002Farstechnica.com\u002Fsecurity\u002F2012\u002F09\u002Foracle-database-stealth-password-cracking-vulnerability\u002F","Arstechnica",[69],"Press\u002FMedia Coverage",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fthreatpost.com\u002Fen_us\u002Fblogs\u002Fflaw-oracle-logon-protocol-leads-easy-password-cracking-092012?utm_source=Threatpost&utm_medium=Tabs&utm_campaign=Today%27s+Most+Popular","Threatpost",[69],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.darkreading.com\u002Fauthentication\u002F167901072\u002Fsecurity\u002Fapplication-security\u002F240007643\u002Fattack-easily-cracks-oracle-database-passwords.html","Darkreading",[69],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F22069","Exploit-db",[82,83,84],"Exploit","Third Party Advisory","VDB Entry",{"url":86,"source":87,"tags":88},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2013:150","Mandriva",[89],"Broken Link",{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2016-2881720.html","Oracle",[94,95],"Patch","Vendor Advisory",{"url":97,"source":92,"tags":98},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpuoct2012-1515893.html",[94,95],{"url":100,"source":101,"tags":102},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F55651","Securityfocus",[],{"url":66,"source":67,"tags":104},[69],{"url":71,"source":72,"tags":106},[69],{"url":75,"source":76,"tags":108},[69],{"url":79,"source":80,"tags":110},[82,83,84],{"url":86,"source":87,"tags":112},[89],{"url":91,"source":92,"tags":114},[94,95],{"url":97,"source":92,"tags":116},[94,95],{"url":100,"source":101,"tags":118},[],16,[121],{"id":122,"name":123,"description":124,"extendedDescription":125,"status":126,"abstraction":127,"structure":128},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":133,"metaDescription":134,"keywords":135,"canonicalUrl":136,"structuredData":137},"What is CVE-2012-3137? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-3137, a medium severity cyber security vulnerability from 2012. High exploit probability (31.4%). The authentication proto...","CVE-2012-3137, CVE-2012-3137 vulnerability, CVE-2012-3137 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, oracle security, database_server vulnerability, primavera_p6_enterprise_project_portfolio_management vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2012-3137",{"@context":138,"@type":139,"headline":133,"description":134,"datePublished":10,"dateModified":11,"author":140,"publisher":144,"about":148,"mainEntityOfPage":152,"articleSection":155,"keywords":156},"https:\u002F\u002Fschema.org","TechArticle",{"@type":141,"name":142,"url":143},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":141,"name":142,"url":143,"logo":145},{"@type":146,"url":147},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":149,"name":6,"description":150,"additionalType":151},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":153,"@id":154},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-3137","Cybersecurity","CVE-2012-3137, CVE-2012-3137 vulnerability, CVE-2012-3137 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[158,175],{"Operator":15,"Negate":15,"Nodes":159},[160],{"Operator":161,"Negate":15,"CPEMatch":162},"OR",[163,165,167,169,171,173],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"ED41086B-840A-4B39-B249-461A4B00B57B",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E4AC251D-9313-4A54-9623-51DC0AEC46FC",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9ACC1D6F-2EDD-4DAA-B9CE-CF516C2B35C6",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EDEDE937-C3D7-421C-9F70-F546AB823E1D",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3D7157D8-4959-4F6C-BFA0-D80862393AA4",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"165A1F85-076B-4216-8EF8-D67E6EC63A6B",{"Operator":15,"Negate":15,"Nodes":176},[177],{"Operator":161,"Negate":15,"CPEMatch":178},[179,181,183],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A56DC460-26F5-453E-A5BC-4C60AA3212EB",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":182,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A47BF03C-BF18-4477-9DBB-20EFEA53AFAB",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"84BF6794-2CE6-407F-B8E0-81871AB7B40B",[],[187],{"id":188,"eventType":189,"eventTime":190,"details":191,"label":192,"color":193},"c507f34b-47b7-4fc6-bc6f-4396e90112da","LOW_EPSS_DELTA","2026-05-24T04:07:52.807616+00:00","Daily EPSS score decreased by 0.109 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":195,"version":21},1792341754146,{"score":197,"band":31,"action":198,"scoredAt":199},46,"Plan remediation","2026-10-17T06:39:07.89002+00:00"]