9.3

CVE-2012-4820

EPSS 9.37%
Published 11.01.2013 00:55:00
Last modified 11.04.2025 00:51:21
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."

Affected products Warnungen 0 Metrics 2 CWE 0 References 28

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Java Version >= 1.4.2 <= 1.4.2.13.13

Ibm ≫ Java Version >= 5.0.0.0 <= 5.0.14.0

Ibm ≫ Java Version >= 6.0.0.0 <= 6.0.11.0

Ibm ≫ Java Version >= 7.0.0.0 <= 7.0.2.0

Ibm ≫ Lotus Domino Version8.0

Ibm ≫ Lotus Domino Version8.0.1

Ibm ≫ Lotus Domino Version8.0.2

Ibm ≫ Lotus Domino Version8.0.2.1

Ibm ≫ Lotus Domino Version8.0.2.2

Ibm ≫ Lotus Domino Version8.0.2.3

Ibm ≫ Lotus Domino Version8.0.2.4

Ibm ≫ Lotus Domino Version8.5.0

Ibm ≫ Lotus Domino Version8.5.0.1

Ibm ≫ Lotus Domino Version8.5.1

Ibm ≫ Lotus Domino Version8.5.1.1

Ibm ≫ Lotus Domino Version8.5.1.2

Ibm ≫ Lotus Domino Version8.5.1.3

Ibm ≫ Lotus Domino Version8.5.1.4

Ibm ≫ Lotus Domino Version8.5.1.5

Ibm ≫ Lotus Domino Version8.5.2.0

Ibm ≫ Lotus Domino Version8.5.2.1

Ibm ≫ Lotus Domino Version8.5.2.2

Ibm ≫ Lotus Domino Version8.5.2.3

Ibm ≫ Lotus Domino Version8.5.2.4

Ibm ≫ Lotus Domino Version8.5.3.0

Ibm ≫ Lotus Domino Version8.5.3.1

Ibm ≫ Lotus Domino Version8.5.3.2

Ibm ≫ Lotus Notes Version8.0

Ibm ≫ Lotus Notes Version8.0.0

Ibm ≫ Lotus Notes Version8.0.1

Ibm ≫ Lotus Notes Version8.0.2

Ibm ≫ Lotus Notes Version8.0.2.0

Ibm ≫ Lotus Notes Version8.0.2.1

Ibm ≫ Lotus Notes Version8.0.2.2

Ibm ≫ Lotus Notes Version8.0.2.3

Ibm ≫ Lotus Notes Version8.0.2.4

Ibm ≫ Lotus Notes Version8.0.2.5

Ibm ≫ Lotus Notes Version8.0.2.6

Ibm ≫ Lotus Notes Version8.5

Ibm ≫ Lotus Notes Version8.5.0.0

Ibm ≫ Lotus Notes Version8.5.0.1

Ibm ≫ Lotus Notes Version8.5.1

Ibm ≫ Lotus Notes Version8.5.1.0

Ibm ≫ Lotus Notes Version8.5.1.1

Ibm ≫ Lotus Notes Version8.5.1.2

Ibm ≫ Lotus Notes Version8.5.1.3

Ibm ≫ Lotus Notes Version8.5.1.4

Ibm ≫ Lotus Notes Version8.5.1.5

Ibm ≫ Lotus Notes Version8.5.2.0

Ibm ≫ Lotus Notes Version8.5.2.1

Ibm ≫ Lotus Notes Version8.5.2.2

Ibm ≫ Lotus Notes Version8.5.2.3

Ibm ≫ Lotus Notes Version8.5.3

Ibm ≫ Lotus Notes Version8.5.3.1

Ibm ≫ Lotus Notes Version8.5.3.2

Ibm ≫ Lotus Notes Version8.5.4

Ibm ≫ Lotus Notes Sametime Version8.0.80407

Ibm ≫ Lotus Notes Sametime Version8.0.80822

Ibm ≫ Lotus Notes Sametime Version8.5.1.20100709-1631 SwEditionadvanced_embedded

Ibm ≫ Lotus Notes Traveler Version8.0

Ibm ≫ Lotus Notes Traveler Version8.0.1

Ibm ≫ Lotus Notes Traveler Version8.0.1.2

Ibm ≫ Lotus Notes Traveler Version8.0.1.3

Ibm ≫ Lotus Notes Traveler Version8.5.0.0

Ibm ≫ Lotus Notes Traveler Version8.5.0.1

Ibm ≫ Lotus Notes Traveler Version8.5.0.2

Ibm ≫ Lotus Notes Traveler Version8.5.1.1

Ibm ≫ Lotus Notes Traveler Version8.5.1.2

Ibm ≫ Lotus Notes Traveler Version8.5.1.3

Ibm ≫ Lotus Notes Traveler Version8.5.2.1

Ibm ≫ Lotus Notes Traveler Version8.5.3

Ibm ≫ Lotus Notes Traveler Version8.5.3.1

Ibm ≫ Lotus Notes Traveler Version8.5.3.2

Ibm ≫ Lotus Notes Traveler Version8.5.3.3

Ibm ≫ Lotus Notes Traveler Version8.5.3.3 Updateinterim_fix_1

Ibm ≫ Rational Change Version4.7

Ibm ≫ Rational Change Version5.1

Ibm ≫ Rational Change Version5.2

Ibm ≫ Rational Change Version5.3

Ibm ≫ Rational Host On-demand Version1.6.0.12

Ibm ≫ Rational Host On-demand Version8.0.8.0

Ibm ≫ Rational Host On-demand Version9.0.8.0

Ibm ≫ Rational Host On-demand Version10.0.9.0

Ibm ≫ Rational Host On-demand Version10.0.10.0

Ibm ≫ Rational Host On-demand Version11.0.3.0

Ibm ≫ Rational Host On-demand Version11.0.4.0

Ibm ≫ Rational Host On-demand Version11.0.5.0

Ibm ≫ Rational Host On-demand Version11.0.5.1

Ibm ≫ Rational Host On-demand Version11.0.6.0

Ibm ≫ Rational Host On-demand Version11.0.6.1

Ibm ≫ Service Delivery Manager Version7.2.1.0

Ibm ≫ Service Delivery Manager Version7.2.2.0

Ibm ≫ Smart Analytics System 5600 Software Version-

Ibm ≫ Smart Analytics System 5600 Software Version9.7

Ibm ≫ Tivoli Monitoring Version6.1.0

Ibm ≫ Tivoli Monitoring Version6.1.0.7

Ibm ≫ Tivoli Monitoring Version6.2.0

Ibm ≫ Tivoli Monitoring Version6.2.0.1

Ibm ≫ Tivoli Monitoring Version6.2.0.2

Ibm ≫ Tivoli Monitoring Version6.2.0.3

Ibm ≫ Tivoli Monitoring Version6.2.1

Ibm ≫ Tivoli Monitoring Version6.2.1.0

Ibm ≫ Tivoli Monitoring Version6.2.1.1

Ibm ≫ Tivoli Monitoring Version6.2.1.2

Ibm ≫ Tivoli Monitoring Version6.2.1.3

Ibm ≫ Tivoli Monitoring Version6.2.1.4

Ibm ≫ Tivoli Monitoring Version6.2.2

Ibm ≫ Tivoli Monitoring Version6.2.2.0

Ibm ≫ Tivoli Monitoring Version6.2.2.1

Ibm ≫ Tivoli Monitoring Version6.2.2.2

Ibm ≫ Tivoli Monitoring Version6.2.2.3

Ibm ≫ Tivoli Monitoring Version6.2.2.4

Ibm ≫ Tivoli Monitoring Version6.2.2.5

Ibm ≫ Tivoli Monitoring Version6.2.2.6

Ibm ≫ Tivoli Monitoring Version6.2.2.7

Ibm ≫ Tivoli Monitoring Version6.2.2.8

Ibm ≫ Tivoli Monitoring Version6.2.2.9

Ibm ≫ Tivoli Monitoring Version6.2.3

Ibm ≫ Tivoli Monitoring Version6.2.3.0

Ibm ≫ Tivoli Monitoring Version6.2.3.1

Ibm ≫ Tivoli Monitoring Version6.2.3.2

Ibm ≫ Tivoli Remote Control Version5.1.2

Ibm ≫ Websphere Real Time Version2.0

Ibm ≫ Websphere Real Time Version3.0

Tivoli Storage Productivity Center ≫ 5.0

Tivoli Storage Productivity Center ≫ 5.1

Tivoli Storage Productivity Center ≫ 5.1.1

Ibm ≫ Smart Analytics System 5600 Version7200

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	9.37%	0.923

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://rhn.redhat.com/errata/RHSA-2013-1455.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2013-1456.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1467.html

Third Party Advisory

http://secunia.com/advisories/51326

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1466.html

Third Party Advisory

http://secunia.com/advisories/51327

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-1465.html

Third Party Advisory

http://secunia.com/advisories/51328

Third Party Advisory

http://secunia.com/advisories/51393

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616490

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21621154

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21631786

Vendor Advisory

http://seclists.org/bugtraq/2012/Sep/38

Third Party Advisory

Mailing List

http://secunia.com/advisories/51634

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21615705

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21615800

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616594

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616616

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616617

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616652

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21616708

Vendor Advisory

http://www.securityfocus.com/bid/55495

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/78764

Third Party Advisory

VDB Entry

https://www-304.ibm.com/support/docview.wss?uid=swg21616546

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2012-4820

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4820

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4820

EUVD