CVE-2012-4822
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and…
- Published
- Updated
- Reserved
- Assigned by
- ibm
Description
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class."
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 6.9% · top 5.9% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (25)
- RHSA-2012:1466 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21616616 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21616594 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21616617 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21621154 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 20120911 [SE-2012-01] Security vulnerabilities in IBM Java (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21616652 (opens in a new tab)x_refsource_CONFIRMx_transferred
- RHSA-2013:1455 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- IV29665 (opens in a new tab)vendor-advisoryx_refsource_AIXAPARx_transferred
- 55495 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- ibm-java-jlc-code-execution(78766) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21631786 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21615800 (opens in a new tab)x_refsource_CONFIRMx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21616490 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 51327 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- https://www-304.ibm.com/support/docview.wss?uid=swg21616546 (opens in a new tab)x_refsource_CONFIRMx_transferred
- RHSA-2012:1467 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2012:1465 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- 51328 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21616708 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 51634 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21615705 (opens in a new tab)x_refsource_CONFIRMx_transferred
- RHSA-2013:1456 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- 51393 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 51326 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .