Lucene search

[email protected]CVE-2012-5075

HistoryOct 16, 2012 - 9:55 p.m.

CVE-2012-5075

2012-10-1621:55:02

[email protected]

web.nvd.nist.gov

oracle

java

vulnerability

remote attackers

confidentiality

nvd

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

82.2%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality, related to JMX.

Affected configurations

NVD

Node

oraclejdkRange≤1.7.0update7

oraclejdkMatch1.7.0

oraclejdkMatch1.7.0update1

oraclejdkMatch1.7.0update2

oraclejdkMatch1.7.0update3

oraclejdkMatch1.7.0update4

oraclejdkMatch1.7.0update5

oraclejdkMatch1.7.0update6

oraclejreRange≤1.7.0update7

oraclejreMatch1.7.0

oraclejreMatch1.7.0update1

oraclejreMatch1.7.0update2

oraclejreMatch1.7.0update3

oraclejreMatch1.7.0update4

oraclejreMatch1.7.0update5

oraclejreMatch1.7.0update6

Node

oraclejdkRange≤1.6.0update35

oraclejdkMatch1.6.0update22

oraclejdkMatch1.6.0update23

oraclejdkMatch1.6.0update24

oraclejdkMatch1.6.0update25

oraclejdkMatch1.6.0update26

oraclejdkMatch1.6.0update27

oraclejdkMatch1.6.0update29

oraclejdkMatch1.6.0update30

oraclejdkMatch1.6.0update31

oraclejdkMatch1.6.0update32

oraclejdkMatch1.6.0update33

oraclejdkMatch1.6.0update34

oraclejreRange≤1.6.0update35

oraclejreMatch1.6.0update22

oraclejreMatch1.6.0update23

oraclejreMatch1.6.0update24

oraclejreMatch1.6.0update25

oraclejreMatch1.6.0update26

oraclejreMatch1.6.0update27

oraclejreMatch1.6.0update29

oraclejreMatch1.6.0update30

oraclejreMatch1.6.0update31

oraclejreMatch1.6.0update32

oraclejreMatch1.6.0update33

oraclejreMatch1.6.0update34

sunjdkMatch1.6.0update_10

sunjdkMatch1.6.0update_11

sunjdkMatch1.6.0update_12

sunjdkMatch1.6.0update_13

sunjdkMatch1.6.0update_14

sunjdkMatch1.6.0update_15

sunjdkMatch1.6.0update_16

sunjdkMatch1.6.0update_17

sunjdkMatch1.6.0update_18

sunjdkMatch1.6.0update_19

sunjdkMatch1.6.0update_3

sunjdkMatch1.6.0update_4

sunjdkMatch1.6.0update_5

sunjdkMatch1.6.0update_6

sunjdkMatch1.6.0update_7

sunjdkMatch1.6.0update1

sunjdkMatch1.6.0update1_b06

sunjdkMatch1.6.0update2

sunjdkMatch1.6.0.200update20

sunjdkMatch1.6.0.210update21

sunjreMatch1.6.0

sunjreMatch1.6.0update_1

sunjreMatch1.6.0update_10

sunjreMatch1.6.0update_11

sunjreMatch1.6.0update_12

sunjreMatch1.6.0update_13

sunjreMatch1.6.0update_14

sunjreMatch1.6.0update_15

sunjreMatch1.6.0update_16

sunjreMatch1.6.0update_17

sunjreMatch1.6.0update_18

sunjreMatch1.6.0update_19

sunjreMatch1.6.0update_2

sunjreMatch1.6.0update_20

sunjreMatch1.6.0update_21

sunjreMatch1.6.0update_3

sunjreMatch1.6.0update_4

sunjreMatch1.6.0update_5

sunjreMatch1.6.0update_6

sunjreMatch1.6.0update_7

Node

oraclejdkRange≤1.5.0update36

oraclejreRange≤1.5.0update36

sunjdkMatch1.5.0

sunjdkMatch1.5.0update1

sunjdkMatch1.5.0update10

sunjdkMatch1.5.0update11

sunjdkMatch1.5.0update11_b03

sunjdkMatch1.5.0update12

sunjdkMatch1.5.0update13

sunjdkMatch1.5.0update14

sunjdkMatch1.5.0update15

sunjdkMatch1.5.0update16

sunjdkMatch1.5.0update17

sunjdkMatch1.5.0update18

sunjdkMatch1.5.0update19

sunjdkMatch1.5.0update2

sunjdkMatch1.5.0update20

sunjdkMatch1.5.0update21

sunjdkMatch1.5.0update22

sunjdkMatch1.5.0update23

sunjdkMatch1.5.0update24

sunjdkMatch1.5.0update25

sunjdkMatch1.5.0update26

sunjdkMatch1.5.0update27

sunjdkMatch1.5.0update28

sunjdkMatch1.5.0update29

sunjdkMatch1.5.0update3

sunjdkMatch1.5.0update31

sunjdkMatch1.5.0update33

sunjdkMatch1.5.0update4

sunjdkMatch1.5.0update5

sunjdkMatch1.5.0update6

sunjdkMatch1.5.0update7

sunjdkMatch1.5.0update7_b03

sunjdkMatch1.5.0update8

sunjdkMatch1.5.0update9

sunjreMatch1.5.0

sunjreMatch1.5.0update1

sunjreMatch1.5.0update10

sunjreMatch1.5.0update11

sunjreMatch1.5.0update12

sunjreMatch1.5.0update13

sunjreMatch1.5.0update14

sunjreMatch1.5.0update15

sunjreMatch1.5.0update16

sunjreMatch1.5.0update17

sunjreMatch1.5.0update18

sunjreMatch1.5.0update19

sunjreMatch1.5.0update2

sunjreMatch1.5.0update20

sunjreMatch1.5.0update21

sunjreMatch1.5.0update22

sunjreMatch1.5.0update23

sunjreMatch1.5.0update24

sunjreMatch1.5.0update25

sunjreMatch1.5.0update26

sunjreMatch1.5.0update27

sunjreMatch1.5.0update28

sunjreMatch1.5.0update29

sunjreMatch1.5.0update3

sunjreMatch1.5.0update31

sunjreMatch1.5.0update33

sunjreMatch1.5.0update4

sunjreMatch1.5.0update5

sunjreMatch1.5.0update6

sunjreMatch1.5.0update7

sunjreMatch1.5.0update8

sunjreMatch1.5.0update9

CPENameOperatorVersion
oracle:jdkoracle jdkle1.7.0
oracle:jreoracle jrele1.7.0

CPE	Name	Operator	Version
oracle:jdk	oracle jdk	le	1.7.0
oracle:jre	oracle jre	le	1.7.0

References

lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html

lists.opensuse.org/opensuse-security-announce/2012-10/msg00023.html

lists.opensuse.org/opensuse-security-announce/2012-11/msg00010.html

lists.opensuse.org/opensuse-security-announce/2012-11/msg00022.html

marc.info/?l=bugtraq&m=135542848327757&w=2

marc.info/?l=bugtraq&m=135758563611658&w=2

rhn.redhat.com/errata/RHSA-2012-1385.html

rhn.redhat.com/errata/RHSA-2012-1386.html

rhn.redhat.com/errata/RHSA-2012-1391.html

rhn.redhat.com/errata/RHSA-2012-1392.html

rhn.redhat.com/errata/RHSA-2012-1465.html

rhn.redhat.com/errata/RHSA-2012-1466.html

rhn.redhat.com/errata/RHSA-2012-1467.html

rhn.redhat.com/errata/RHSA-2013-1455.html

rhn.redhat.com/errata/RHSA-2013-1456.html

secunia.com/advisories/51028

secunia.com/advisories/51029

secunia.com/advisories/51141

secunia.com/advisories/51166

secunia.com/advisories/51315

secunia.com/advisories/51326

secunia.com/advisories/51327

secunia.com/advisories/51328

secunia.com/advisories/51390

secunia.com/advisories/51438

security.gentoo.org/glsa/glsa-201406-32.xml

www-01.ibm.com/support/docview.wss?uid=swg21616490

www-01.ibm.com/support/docview.wss?uid=swg21620037

www-01.ibm.com/support/docview.wss?uid=swg21621154

www-01.ibm.com/support/docview.wss?uid=swg21631786

www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-023/index.html

www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html

www.securityfocus.com/bid/56081

www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

exchange.xforce.ibmcloud.com/vulnerabilities/79431

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16684

8.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

82.2%

JSON

Related for CVE-2012-5075

ubuntucve1 nvd1 prion1 cvelist1 openvas35 suse8 nessus41 amazon2 ibm5 oraclelinux3 redhat10 centos3 threatpost1 veracode22 ubuntu1 securityvulns1 gentoo2