Vendor / Project: Oracle Product: Java SE Description: The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. Required Action: Apply updates per vendor instructions. Due Date: 2022-04-18 Ransomware Campaign Use: Unknown Notes: https://nvd.nist.gov/vuln/detail/CVE-2012-5076
CVE-2012-5076 — Oracle Java SE Sandbox Bypass Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-03-28 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 9.8
- Quelle-ID:
cisa_kev - uid_hash:
f97393b2dec48bd4954b50598668845fe434d07678feebf99100526b95322ac5
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.8 |
CRITICAL |
9.8 |
2012-10-16 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |