CVE-2012-5076

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

91.25% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-03-28

Published

2012-10-16

Updated

2025-10-22

Metasploit modules (2)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_glassfi…
• rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_jaxws.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/24309
• https://www.exploit-db.com/exploits/22657

Security advisories

• http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
• http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
• http://rhn.redhat.com/errata/RHSA-2012-1386.html
• http://rhn.redhat.com/errata/RHSA-2012-1391.html
• http://rhn.redhat.com/errata/RHSA-2012-1467.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml

References

• CVE Record
• NVD entry