CVE-2012-5076

oracle jre, suse linux enterprise desktop

Published 16 Oct 2012 · updated 16 Jun 2026 · Analyzed

9.8 Critical · CVSS 3.1, CISA ADP

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 28 Mar 2022, with a remediation deadline of 18 Apr 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

References

lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html · Mailing List, Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1386.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1391.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2012-1467.html · Third Party Advisory
secunia.com/advisories/51029 · Not Applicable
secunia.com/advisories/51326 · Not Applicable
secunia.com/advisories/51390 · Not Applicable
security.gentoo.org/glsa/glsa-201406-32.xml · Third Party Advisory
www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html · Patch, Vendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16641 · Broken Link
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5076 · US Government Resource