CVE-2012-5076

critical-risk
Published 2012-10-16

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

Do I need to act?

!
91.7% chance of exploitation in next 30 days
EPSS score — higher than 8% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
2 public exploits available
24309, 22657
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (9)

Jre
Jre
Jre
Jre
Jre
Jre
Jre
Jre

Affected Vendors

Suse Oracle

References (21)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1386.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1391.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1467.html
Not Applicable http://secunia.com/advisories/51029
Not Applicable http://secunia.com/advisories/51326
Not Applicable http://secunia.com/advisories/51390
Third Party Advisory http://security.gentoo.org/glsa/glsa-201406-32.xml
Patch http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Mailing List http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1386.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1391.html
Third Party Advisory http://rhn.redhat.com/errata/RHSA-2012-1467.html
Not Applicable http://secunia.com/advisories/51029
Not Applicable http://secunia.com/advisories/51326
Not Applicable http://secunia.com/advisories/51390
Third Party Advisory http://security.gentoo.org/glsa/glsa-201406-32.xml
Patch http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
and 1 more references
81
/ 100
critical-risk
Severity 32/34 · Critical
Exploitability 34/34 · Critical
Exposure 15/34 · Moderate