CVEvulnerability

CVE-2012-1723

9.8 CRITICAL Known exploited Published 2012-06-16 Modified 2026-08-06 Official page ↗

CISA Known Exploited Vulnerability

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability — Oracle Java SE

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.

Added to KEV: 2022-03-03
Remediation due: 2022-03-24
Ransomware use: Known
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2012-1723

Status: Analyzed
Published: 2012-06-16
Last modified: 2026-08-06
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-284

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Affected configurations

• oracle jdk (<= 1.4.2 37) • oracle jdk 1.5.0 • oracle jdk 1.6.0 • oracle jdk 1.7.0 • oracle jre (<= 1.4.2 37) • oracle jre 1.5.0 • oracle jre 1.6.0 • oracle jre 1.7.0 • redhat icedtea6 (< 1.10.8) • redhat icedtea6 (>= 1.11.0 < 1.11.3) • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux eus 6.2 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server aus 6.2 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

References