CVE-2012-5076: oracle jre +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2012-5076

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 91,3%

Kerentanan Improper Access Control pada oracle jre, suse linux enterprise desktop. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP. Masuk katalog KEV CISA pada 28 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

Rincian

Terbit di NVD: 16 Oktober 2012
Terakhir diubah: 16 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-284: Improper Access Control
EPSS (30 hari): 91,3% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Oracle Java SE Sandbox Bypass Vulnerability
Masuk KEV: 28 Maret 2022
Tenggat CISA: 18 April 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
oracle	jre	Versi 1.7.0
oracle	jre	Versi 1.7.0 update1
oracle	jre	Versi 1.7.0 update2
oracle	jre	Versi 1.7.0 update3
oracle	jre	Versi 1.7.0 update4
oracle	jre	Versi 1.7.0 update5
oracle	jre	Versi 1.7.0 update6
oracle	jre	Versi 1.7.0 update7
suse	linux enterprise desktop	Versi 11 sp2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html patch · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5076 pemerintah AS
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html mailing list · advisory pihak ketiga
http://rhn.redhat.com/errata/RHSA-2012-1386.html advisory pihak ketiga
http://rhn.redhat.com/errata/RHSA-2012-1391.html advisory pihak ketiga
http://rhn.redhat.com/errata/RHSA-2012-1467.html advisory pihak ketiga
http://security.gentoo.org/glsa/glsa-201406-32.xml advisory pihak ketiga
http://secunia.com/advisories/51029 not applicable
http://secunia.com/advisories/51326 not applicable
http://secunia.com/advisories/51390 not applicable
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16641 broken link

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.