{"id":"CVE-2012-3151","description":"Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Unix and Linux platforms, allows local users to affect integrity and availability via unknown vectors.","cvssScore":3.3,"cvssVersion":"2.0","cvssVector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","cvssMetrics":[{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"resolved":"OUT-OF-SCOPE","published":"2012-10-16","lastModified":"2026-06-16","affectedProducts":[{"vendor":"oracle","product":"database server","version":"10.2.0.4"},{"vendor":"oracle","product":"database server","version":"10.2.0.5"},{"vendor":"oracle","product":"database server","version":"11.1.0.7"},{"vendor":"oracle","product":"database server","version":"11.2.0.2"},{"vendor":"oracle","product":"database server","version":"11.2.0.3"}],"totalAffectedProducts":1,"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]}],"reasoning":{"decidingSource":"h2-out-of-scope-with-cpe","decidingReason":"Manual classification marked OUT-OF-SCOPE but CVE matches known CPE products","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"no-match"},{"rule":"armr-secure-rule-file","stage":"scope","outcome":"no-match"},{"rule":"manual-classification","stage":"scope","outcome":"no-match"},{"rule":"h2-history","stage":"scope","outcome":"matched","status":"OUT-OF-SCOPE","detail":"Found in legacy manual classifications","decisive":true}]},"oracleAdvisories":[{"advisory":"Oracle Critical Patch Update October 2012","releaseType":"CPU","quarter":"2012-Q4","url":"https://www.oracle.com/security-alerts/cpuoct2012.html","products":[{"product":"Oracle Database Server","component":"Core RDBMS","affectedVersions":"10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"none"},"action":{"state":"not-needed","type":"none"},"review":{"state":"human","basis":"manual-review"}},"h2Comments":"## Manual Classification Context\n\n\n**Labels:** LOCAL LOGON, SEE NOTE 2\n\n**Products:** CORE RDBMS, ORACLE DATABASE SERVER","signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.00346,"percentile":0.27798},"ssvc":{"available":false}}