by Kastro
Paper/Archive/CVE-2012-5076

CVE-2012-5076

Oracle Java SE — Oracle Java SE Sandbox Bypass Vulnerability

KEV · due 18 AprEPSS 91%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.8.998 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisorylists.opensuse.org/opensuse-security-announce/2012-10/msg00016.htmladvisorysecurity.gentoo.org/glsa/glsa-201406-32.xmladvisoryrhn.redhat.com/errata/RHSA-2012-1386.htmladvisoryrhn.redhat.com/errata/RHSA-2012-1391.htmlwriteupsecunia.com/advisories/51029writeupsecunia.com/advisories/51390advisoryrhn.redhat.com/errata/RHSA-2012-1467.htmlrefoval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16641reforacle.com/technetwork/topics/security/javacpuoct2012-1515924.htmlwriteupsecunia.com/advisories/51326refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5076kevcisa.gov/known-exploited-vulnerabilities-catalog