9.8Kritik KEV Fidye yazılımında kullanılıyor

CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

oracle jdk; oracle jre; redhat icedtea6; redhat enterprise linux desktop Yayım: 2012-06-17 00:00 (14 yıl önce)

Aktif olarak istismar ediliyor — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 24.03.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2012-1723

Açıklama

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Zayıflık türü (CWE): CWE-284

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
oracle	jdk	≤ 1.4.2_37
oracle	jre	≤ 1.4.2_37
redhat	enterprise linux desktop	5.0
redhat	enterprise linux eus	6.2
redhat	enterprise linux server	5.0
redhat	enterprise linux server aus	6.2
redhat	enterprise linux workstation	5.0
redhat	icedtea6	< 1.10.8

Kaynaklar ve yamalar

GLSA-201406-32 vendor-advisoryThird Party Advisory
RHSA-2012:0734 vendor-advisoryThird Party Advisory
http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html Vendor Advisory
[OpenJDK] 20120612 IcedTea6 1.10.8 & 1.11.3 Released mailing-listMailing List
SSRT100919 vendor-advisoryMailing List
oval:org.mitre.oval:def:16259 vdb-entrysignatureBroken Link
53960 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
MDVSA-2012:095 vendor-advisoryBroken Link
http://www.ibm.com/support/docview.wss?uid=swg21615246 Broken Link
51080 third-party-advisoryBroken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1723 US Government Resource

CPE eşleşmeleri (NVD) (60)

cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:* ≤ 1.4.2_37
cpe:2.3:a:oracle:jdk:1.5.0:-:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update1:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update10:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update11:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update12:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update13:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update14:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update15:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update16:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update17:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update18:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update19:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update2:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update20:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update21:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update22:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update23:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update24:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update25:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update26:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update27:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update28:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update29:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update3:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update30:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update31:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update32:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update33:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update34:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.5.0:update35:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:-:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update1:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update11:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update12:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update13:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update14:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update15:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update16:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update17:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update18:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update19:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update2:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update20:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update21:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update22:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update23:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update24:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update25:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update26:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update27:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update29:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update3:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update30:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update31:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update32:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update32_b31:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.6.0:update32_b32:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:-:*:*:*:*:*:*

CVSS puanı

9.8Kritik

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tüm puanlar (3)

CISA-ADP	CVSS 3.1	9.8Kritik
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	9.8Kritik
nvd	CVSS 2.0	10.0Yüksek

EPSS (30 günde istismar olasılığı)

93.57%

tüm CVE'lerin %100'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: yes
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2012-03-16
Yayımlandı2012-06-17 00:00
IP-DB'ye ulaştı2026-10-24 23:34
KEV'e eklendi2022-03-03
Son güncelleme2026-08-06 08:16

Numarayı veren (CNA): oracle
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Java SE / OpenJDK

9.1Kritik

CVE-2026-114820 11 gün önce

Oracle Corporation Oracle Java SE; Oracle Corporation Oracle GraalVM for JDK; Oracle Corporation Oracle GraalVM Enterprise Edition

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.…

9.1Kritik

CVE-2026-91403 14 gün önce

Oracle Corporation Oracle Java SE; Oracle Corporation Oracle GraalVM for JDK; Oracle Corporation Oracle GraalVM Enterprise Edition

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1;…

4.8Orta

CVE-2026-91487 15 gün önce

Oracle Corporation Oracle Java SE

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21…

7.5Yüksek

CVE-2026-91484 15 gün önce

Oracle Corporation Oracle Java SE

Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE …

5.9Orta

CVE-2026-91462 15 gün önce

Oracle Corporation Oracle Java SE; Oracle Corporation Oracle GraalVM for JDK; Oracle Corporation Oracle GraalVM Enterprise Edition

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1,…

5.3Orta

CVE-2026-91463 15 gün önce

Oracle Corporation Oracle Java SE; Oracle Corporation Oracle GraalVM for JDK; Oracle Corporation Oracle GraalVM Enterprise Edition