CVE-2012-1724

2012-06-1621:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2012-1724

java runtime environment

jre

oracle

remote attack

availability

jaxp

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.8%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.

CPENameOperatorVersion
oracle:jreoracle jrele1.7.0
oracle:jdkoracle jdkeq1.7.0
sun:jdksun jdkeq1.6.0
sun:jresun jreeq1.6.0
oracle:jdkoracle jdkeq1.6.0
oracle:jreoracle jreeq1.6.0

CPE	Name	Operator	Version
oracle:jre	oracle jre	le	1.7.0
oracle:jdk	oracle jdk	eq	1.7.0
sun:jdk	sun jdk	eq	1.6.0
sun:jre	sun jre	eq	1.6.0
oracle:jdk	oracle jdk	eq	1.6.0
oracle:jre	oracle jre	eq	1.6.0