NetSight
IP …
critical9.8Known exploitedPublic exploit code

CVE-2012-5076

Oracle Java SE Sandbox Bypass Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-28. Federal due date: 2022-04-18.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

Affected products

VendorProductAffected versions
OracleJre
Version 1.7.0
SuseLinux Enterprise Desktop
Version 11

Weakness classification

CWE-284

References