CVE-2012-5070
Aliases:CGA-2fw5-v54m-8fhpCGA-2vr3-94pp-v755CGA-35rc-7w7j-mvfqCGA-367w-4vfq-jwv2CGA-379h-pxcp-6qx9CGA-4385-cx8m-g74hCGA-4h3r-8qvg-89g5CGA-4qfm-6g78-78rvCGA-5r6g-rqq5-577xCGA-839h-qcmx-v46rCGA-84q3-9j77-p32xCGA-8pxm-3mqh-6v2cCGA-9567-xf69-mhcgCGA-95x4-c3wv-mp87CGA-9f52-2wcg-v6rhCGA-cjj4-92gc-rqjwCGA-crr7-hhr6-34w6CGA-fm88-48mp-99fpCGA-fq5h-jf9p-3f5wCGA-frvf-4rx2-cv68CGA-fx8p-w96v-7vcwCGA-gq29-8m8j-5jf8CGA-hqfc-mj7p-23hcCGA-hxm6-vxqq-33vfCGA-j3j9-2m4f-hj27CGA-mj4x-p4qc-745cCGA-mwc7-w49j-5mwjCGA-qh3j-6qr7-2vr8CGA-rx8v-7768-735qCGA-vrc7-48vv-f62vCGA-xfr4-3q36-gqgwCGA-xwqp-c379-x2h4
Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 16 Oct 2012, 21:29
Last modified:06 Aug 2024, 20:58
Vulnerability Summary
Overall Risk (default)
low
21/100 CVSS Score
5 MEDIUM
v2.0 (nvd)
EPSS Score
3.14% LOW
3% probability +1.76%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
16 Oct 2012, 21:29
Published
Vulnerability first disclosed
06 Aug 2024, 20:58
Last Modified
Vulnerability information updated
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.
CVSS Metrics
- v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Trends
Current EPSS score: 3.14%• Percentile: 87%
Affected Systems
- chainguard•openjdk-11-openj9-default-policy
< 0.53.0-r0
- chainguard•openjdk-17-openj9-default-policy
< 0.53.0-r0
- chainguard•openjdk-21-openj9-default-policy
< 0.48.0-r2
- chainguard•openjdk-25-openj9
< 0.59.0-r1
- chainguard•openjdk-25-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-26-openj9
< 0.59.0-r1
- chainguard•openjdk-26-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-8-openj9-dbg
< 0.53.0-r1
- oracle•jdk
≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6
- oracle•jre
≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6
References (12)
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://rhn.redhat.com/errata/RHSA-2012-1386.html
- http://rhn.redhat.com/errata/RHSA-2012-1391.html
- http://secunia.com/advisories/51029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79430
- http://secunia.com/advisories/51390
- http://rhn.redhat.com/errata/RHSA-2012-1467.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16093
- http://www.securityfocus.com/bid/56079
- http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
- http://secunia.com/advisories/51326