Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-5086

Опубликовано: 16 окт. 2012
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5java-1.6.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.7.0-ibmAffected
Red Hat Enterprise Linux 5java-1.7.0-openjdkAffected
Red Hat Enterprise Linux 5java-1.7.0-oracleAffected
Red Hat Enterprise Linux 6java-1.6.0-ibmNot affected
Red Hat Enterprise Linux 5java-1.6.0-openjdkFixedRHSA-2012:138517.10.2012
Red Hat Enterprise Linux 6java-1.6.0-openjdkFixedRHSA-2012:138417.10.2012
Red Hat Enterprise Linux 6java-1.7.0-openjdkFixedRHSA-2012:138617.10.2012
Supplementary for Red Hat Enterprise Linux 5java-1.6.0-sunFixedRHSA-2012:139218.10.2012
Supplementary for Red Hat Enterprise Linux 6java-1.7.0-oracleFixedRHSA-2012:139118.10.2012

Показывать по

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=865428OpenJDK: XMLDecoder sandbox restriction bypass (Beans, 7195917)

EPSS

Процентиль: 91%
0.07287
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

nvd
почти 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

debian
почти 13 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) compon ...

github
больше 3 лет назад

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

oracle-oval
почти 13 лет назад

ELSA-2012-1385: java-1.6.0-openjdk security update (IMPORTANT)

EPSS

Процентиль: 91%
0.07287
Низкий

6.8 Medium

CVSS2