CVE-2012-1723

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

93.69% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-03-03, used in ransomware campaigns

Published

2012-06-16

Updated

2026-08-06

Proof-of-concept exploits (2)

• EthanNJC/CVE-2012-17230★ · 2017-02-20
• S3N4T0R-0X0/Energetic-Bear-APT4★ · 2024-05-11

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_verifier_fiel…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19717

Security advisories

• http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html
• http://rhn.redhat.com/errata/RHSA-2012-0734.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://www.securityfocus.com/bid/53960
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:095

References

• CVE Record
• NVD entry

Related

• CVE-2011-0611
• CVE-2013-1347
• CVE-2013-2465
• CVE-2017-11882
• CVE-2021-40444