{"id":"CVE-2012-1746","description":"Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1747.","cvssScore":5,"cvssVersion":"2.0","cvssVector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","cvssMetrics":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"resolved":"OUT-OF-SCOPE","published":"2012-07-17","lastModified":"2026-06-16","affectedProducts":[{"vendor":"oracle","product":"database server","version":"10.2.0.3"},{"vendor":"oracle","product":"database server","version":"10.2.0.4"},{"vendor":"oracle","product":"database server","version":"10.2.0.5"},{"vendor":"oracle","product":"database server","version":"11.1.0.7"},{"vendor":"oracle","product":"database server","version":"11.2.0.2"},{"vendor":"oracle","product":"database server","version":"11.2.0.3"}],"totalAffectedProducts":1,"references":[{"url":"http://osvdb.org/83947","source":"secalert_us@oracle.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/54507","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1027260","source":"secalert_us@oracle.com"}],"reasoning":{"decidingSource":"h2-out-of-scope-with-cpe","decidingReason":"Manual classification marked OUT-OF-SCOPE but CVE matches known CPE products","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"no-match"},{"rule":"armr-secure-rule-file","stage":"scope","outcome":"no-match"},{"rule":"manual-classification","stage":"scope","outcome":"no-match"},{"rule":"h2-history","stage":"scope","outcome":"matched","status":"OUT-OF-SCOPE","detail":"Found in legacy manual classifications","decisive":true}]},"oracleAdvisories":[{"advisory":"Oracle Critical Patch Update July 2012","releaseType":"CPU","quarter":"2012-Q3","url":"https://www.oracle.com/security-alerts/cpujul2012.html","products":[{"product":"Oracle Database Server","component":"Network Layer","affectedVersions":"10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"none"},"action":{"state":"not-needed","type":"none"},"review":{"state":"human","basis":"manual-review"}},"h2Comments":"## Manual Classification Context\n\n\n**Labels:** SEE NOTE 1, NO AUTH REMOTE EXPLOIT, ORACLE NET\n\n**Products:** NETWORK LAYER, ORACLE DATABASE SERVER","signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.0251,"percentile":0.83897},"ssvc":{"available":false}}