10

CVE-2012-1682

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136.  NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."

Data is provided by the National Vulnerability Database (NVD)
OracleJdk Updateupdate6 Version <= 1.7.0
OracleJdk Version1.7.0
OracleJdk Version1.7.0 Updateupdate1
OracleJdk Version1.7.0 Updateupdate2
OracleJdk Version1.7.0 Updateupdate3
OracleJdk Version1.7.0 Updateupdate4
OracleJdk Version1.7.0 Updateupdate5
OracleJre Updateupdate6 Version <= 1.7.0
OracleJre Version1.7.0
OracleJre Version1.7.0 Updateupdate1
OracleJre Version1.7.0 Updateupdate2
OracleJre Version1.7.0 Updateupdate3
OracleJre Version1.7.0 Updateupdate4
OracleJre Version1.7.0 Updateupdate5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.93% 0.859
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C