CVE-2012-5076 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, relat...
HighCVSS 10.0
EPSS 91.3%
CISA KEV
added 2022-03-28 · due 2022-04-18
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-28
- Due date (FCEB)
- 2022-04-18
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jre | = 1.7.0 | No fix listed |
| oracle jre | = 1.7.0-update1 | No fix listed |
| oracle jre | = 1.7.0-update2 | No fix listed |
| oracle jre | = 1.7.0-update3 | No fix listed |
| oracle jre | = 1.7.0-update4 | No fix listed |
| oracle jre | = 1.7.0-update5 | No fix listed |
| oracle jre | = 1.7.0-update6 | No fix listed |
| oracle jre | = 1.7.0-update7 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp2 | No fix listed |
References
- SUSE-SU-2012:1398 mailing-list third-party-advisory vendor-advisory
- RHSA-2012:1386 third-party-advisory vendor-advisory
- RHSA-2012:1391 third-party-advisory vendor-advisory
- RHSA-2012:1467 third-party-advisory vendor-advisory
- 51029 not-applicable third-party-advisory
- 51326 not-applicable third-party-advisory
- 51390 not-applicable third-party-advisory
- GLSA-201406-32 third-party-advisory vendor-advisory
- www.oracle.com patch vendor-advisory
- oval:org.mitre.oval:def:16641 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource