CVE-2012-5076

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

91.01% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-03-28

Published

2012-10-16

Updated

2025-10-22

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/24309
• https://www.exploit-db.com/exploits/22657

References

• CVE Record
• NVD entry

Related

• CVE-2012-5067
• CVE-2012-5088
• CVE-2012-5054
• CVE-2012-5098
• CVE-2012-5049
• CVE-2012-5099