CVE-2012-0818: redhat resteasy

EPSS trend

Probability

3.21%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.21% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

47 links

bugzilla.redhat.com/show_bug.cgi?id=785631X Refsource MISCREPORTWEB
rhn.redhat.com/errata/RHSA-2012-1059.htmlVendor AdvisoryX Refsource REDHATWEB
www.securityfocus.com/bid/51748VDB EntryX Refsource BID
issues.jboss.org/browse/RESTEASY-637X Refsource CONFIRMPatchWEB
rhn.redhat.com/errata/RHSA-2012-1056.htmlVendor AdvisoryX Refsource REDHATWEB
rhn.redhat.com/errata/RHSA-2012-1058.htmlVendor AdvisoryX Refsource REDHATWEB
www.securityfocus.com/bid/51766VDB EntryX Refsource BID
www.osvdb.org/78679VDB EntryX Refsource OSVDB
rhn.redhat.com/errata/RHSA-2012-0519.htmlVendor AdvisoryX Refsource REDHATWEB
secunia.com/advisories/50084Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 47 references

rhn.redhat.com/errata/RHSA-2014-0371.htmlVendor AdvisoryX Refsource REDHATWEB
rhn.redhat.com/errata/RHSA-2012-1057.htmlVendor AdvisoryX Refsource REDHATWEB
exchange.xforce.ibmcloud.com/vulnerabilities/72808VDB EntryX Refsource XFWEB
secunia.com/advisories/48954Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2012-0441.htmlVendor AdvisoryX Refsource REDHATWEB
secunia.com/advisories/47832Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/57719Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/57716Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/47818Third Party AdvisoryX Refsource SECUNIAVendor Advisory
rhn.redhat.com/errata/RHSA-2014-0372.htmlVendor AdvisoryX Refsource REDHATWEB
secunia.com/advisories/48697Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2012-1125.htmlVendor AdvisoryX Refsource REDHATWEB
access.redhat.com/errata/RHSA-2013:1263AdvisoryWEB
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/support/offerings/techpreview/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=855271REPORT
bugzilla.redhat.com/show_bug.cgi?id=863929REPORT
bugzilla.redhat.com/show_bug.cgi?id=887806REPORT
bugzilla.redhat.com/show_bug.cgi?id=889942REPORT
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1263.jsonAdvisory
access.redhat.com/security/cve/CVE-2012-0818REPORTWEB
www.cve.org/CVERecord?id=CVE-2012-0818Advisory
nvd.nist.gov/vuln/detail/CVE-2012-0818Advisory
github.com/resteasy/resteasy/commit/71ace879cf92d323bfa4d3e88db0c3059109bbf6WEB
web.archive.org/web/20200229045254/https://www.securityfocus.com/bid/51766WEB
web.archive.org/web/20200229044434/http://www.securityfocus.com/bid/51748WEB
github.com/resteasy/ResteasyPACKAGE
access.redhat.com/errata/RHSA-2014:0372WEB
access.redhat.com/errata/RHSA-2014:0371WEB
access.redhat.com/errata/RHSA-2012:1125WEB
access.redhat.com/errata/RHSA-2012:1059WEB
access.redhat.com/errata/RHSA-2012:1058WEB
access.redhat.com/errata/RHSA-2012:1057WEB
access.redhat.com/errata/RHSA-2012:1056WEB
access.redhat.com/errata/RHSA-2012:0519WEB
access.redhat.com/errata/RHSA-2012:0441WEB
access.redhat.com/errata/RHSA-2012:0421WEB

Related vulnerabilities

CVE-2018-1051ubunturesteasy+31.31%8y ago25-01-2018 20:00It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider.CVE-2021-20289ubunturesteasy+61.40%5y ago26-03-2021 16:28A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.CVE-2021-20293ubunturesteasy+50.86%5y ago10-06-2021 11:09A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling @javax.ws.rs.PathParam without any @Produces MediaType. This flaw allows an attacker to launch a reflected XSS attack. The highest threat from this vulnerability is to data confidentiality and integrity.CVE-2016-9606debianresteasy3.0+945.97%8y ago09-03-2018 20:00JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.CVE-2016-6348debianresteasy3.0+31.57%9y ago12-04-2017 22:00JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.CVE-2016-6346debianresteasy3.0+35.60%10y ago07-09-2016 18:00RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.

All vulnerabilities inresteasy

CVE-2012-0818: redhat resteasy

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References