CVE-2012-4821 Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlie...
HighCVSS 9.3
EPSS 6.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm java | >= 1.4.2, <= 1.4.2.13.13 | No fix listed |
| ibm java | >= 5.0.0.0, <= 5.0.14.0 | No fix listed |
| ibm java | >= 6.0.0.0, <= 6.0.11.0 | No fix listed |
| ibm java | >= 7.0.0.0, <= 7.0.2.0 | No fix listed |
| ibm lotus domino | = 8.0 | No fix listed |
| ibm lotus domino | = 8.0.1 | No fix listed |
| ibm lotus domino | = 8.0.2 | No fix listed |
| ibm lotus domino | = 8.0.2.1 | No fix listed |
| ibm lotus domino | = 8.0.2.2 | No fix listed |
| ibm lotus domino | = 8.0.2.3 | No fix listed |
| ibm lotus domino | = 8.0.2.4 | No fix listed |
| ibm lotus domino | = 8.5.0 | No fix listed |
| ibm lotus domino | = 8.5.0.1 | No fix listed |
| ibm lotus domino | = 8.5.1 | No fix listed |
| ibm lotus domino | = 8.5.1.1 | No fix listed |
| ibm lotus domino | = 8.5.1.2 | No fix listed |
| ibm lotus domino | = 8.5.1.3 | No fix listed |
| ibm lotus domino | = 8.5.1.4 | No fix listed |
| ibm lotus domino | = 8.5.1.5 | No fix listed |
| ibm lotus domino | = 8.5.2.0 | No fix listed |
| ibm lotus domino | = 8.5.2.1 | No fix listed |
| ibm lotus domino | = 8.5.2.2 | No fix listed |
| ibm lotus domino | = 8.5.2.3 | No fix listed |
| ibm lotus domino | = 8.5.2.4 | No fix listed |
| ibm lotus domino | = 8.5.3.0 | No fix listed |
Show 103 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm lotus domino | = 8.5.3.1 | No fix listed |
| ibm lotus domino | = 8.5.3.2 | No fix listed |
| ibm lotus notes | = 8.0 | No fix listed |
| ibm lotus notes | = 8.0.0 | No fix listed |
| ibm lotus notes | = 8.0.1 | No fix listed |
| ibm lotus notes | = 8.0.2 | No fix listed |
| ibm lotus notes | = 8.0.2.0 | No fix listed |
| ibm lotus notes | = 8.0.2.1 | No fix listed |
| ibm lotus notes | = 8.0.2.2 | No fix listed |
| ibm lotus notes | = 8.0.2.3 | No fix listed |
| ibm lotus notes | = 8.0.2.4 | No fix listed |
| ibm lotus notes | = 8.0.2.5 | No fix listed |
| ibm lotus notes | = 8.0.2.6 | No fix listed |
| ibm lotus notes | = 8.5 | No fix listed |
| ibm lotus notes | = 8.5.0.0 | No fix listed |
| ibm lotus notes | = 8.5.0.1 | No fix listed |
| ibm lotus notes | = 8.5.1 | No fix listed |
| ibm lotus notes | = 8.5.1.0 | No fix listed |
| ibm lotus notes | = 8.5.1.1 | No fix listed |
| ibm lotus notes | = 8.5.1.2 | No fix listed |
| ibm lotus notes | = 8.5.1.3 | No fix listed |
| ibm lotus notes | = 8.5.1.4 | No fix listed |
| ibm lotus notes | = 8.5.1.5 | No fix listed |
| ibm lotus notes | = 8.5.2.0 | No fix listed |
| ibm lotus notes | = 8.5.2.1 | No fix listed |
| ibm lotus notes | = 8.5.2.2 | No fix listed |
| ibm lotus notes | = 8.5.2.3 | No fix listed |
| ibm lotus notes | = 8.5.3 | No fix listed |
| ibm lotus notes | = 8.5.3.1 | No fix listed |
| ibm lotus notes | = 8.5.3.2 | No fix listed |
| ibm lotus notes | = 8.5.4 | No fix listed |
| ibm lotus notes sametime | = 8.0.80407 | No fix listed |
| ibm lotus notes sametime | = 8.0.80822 | No fix listed |
| ibm lotus notes sametime | = 8.5.1.20100709-1631 | No fix listed |
| ibm lotus notes traveler | = 8.0 | No fix listed |
| ibm lotus notes traveler | = 8.0.1 | No fix listed |
| ibm lotus notes traveler | = 8.0.1.2 | No fix listed |
| ibm lotus notes traveler | = 8.0.1.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.0.0 | No fix listed |
| ibm lotus notes traveler | = 8.5.0.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.0.2 | No fix listed |
| ibm lotus notes traveler | = 8.5.1.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.1.2 | No fix listed |
| ibm lotus notes traveler | = 8.5.1.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.2.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.1 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.2 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.3 | No fix listed |
| ibm lotus notes traveler | = 8.5.3.3-interim_fix_1 | No fix listed |
| ibm rational change | = 4.7 | No fix listed |
| ibm rational change | = 5.1 | No fix listed |
| ibm rational change | = 5.2 | No fix listed |
| ibm rational change | = 5.3 | No fix listed |
| ibm rational host on-demand | = 1.6.0.12 | No fix listed |
| ibm rational host on-demand | = 8.0.8.0 | No fix listed |
| ibm rational host on-demand | = 9.0.8.0 | No fix listed |
| ibm rational host on-demand | = 10.0.9.0 | No fix listed |
| ibm rational host on-demand | = 10.0.10.0 | No fix listed |
| ibm rational host on-demand | = 11.0.3.0 | No fix listed |
| ibm rational host on-demand | = 11.0.4.0 | No fix listed |
| ibm rational host on-demand | = 11.0.5.0 | No fix listed |
| ibm rational host on-demand | = 11.0.5.1 | No fix listed |
| ibm rational host on-demand | = 11.0.6.0 | No fix listed |
| ibm rational host on-demand | = 11.0.6.1 | No fix listed |
| ibm service delivery manager | = 7.2.1.0 | No fix listed |
| ibm service delivery manager | = 7.2.2.0 | No fix listed |
| ibm smart analytics system 5600 software | All versions | No fix listed |
| ibm smart analytics system 5600 software | = 9.7 | No fix listed |
| ibm tivoli monitoring | = 6.1.0 | No fix listed |
| ibm tivoli monitoring | = 6.1.0.7 | No fix listed |
| ibm tivoli monitoring | = 6.2.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.0.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.0.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.0.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.1.4 | No fix listed |
| ibm tivoli monitoring | = 6.2.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.2 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.4 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.5 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.6 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.7 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.8 | No fix listed |
| ibm tivoli monitoring | = 6.2.2.9 | No fix listed |
| ibm tivoli monitoring | = 6.2.3 | No fix listed |
| ibm tivoli monitoring | = 6.2.3.0 | No fix listed |
| ibm tivoli monitoring | = 6.2.3.1 | No fix listed |
| ibm tivoli monitoring | = 6.2.3.2 | No fix listed |
| ibm tivoli remote control | = 5.1.2 | No fix listed |
| ibm websphere real time | = 2.0 | No fix listed |
| ibm websphere real time | = 3.0 | No fix listed |
| tivoli storage productivity center 5.0 | All versions | No fix listed |
| tivoli storage productivity center 5.1 | All versions | No fix listed |
| tivoli storage productivity center 5.1.1 | All versions | No fix listed |
| ibm smart analytics system 5600 | = 7200 | No fix listed |
References
- RHSA-2012:1467 third-party-advisory vendor-advisory
- 20120911 [SE-2012-01] Security vulnerabilities in IBM Java mailing-list third-party-advisory
- 51326 third-party-advisory
- 51634 third-party-advisory
- IV29659 vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- 55495 third-party-advisory vdb-entry
- ibm-java-gdm-sa-ce(78765) third-party-advisory vdb-entry
- www-304.ibm.com vendor-advisory