CVE-2012-0551
medium · 5.8Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
5.8
CVSS
11.4%
EPSS (exploit prob.)
96th
EPSS percentile
2012-05-03
Published
AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| oracle | glassfish_server | 3.1.1 |
| oracle | jdk | <= 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.6.0 |
| oracle | jre | <= 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
| sun | jdk | 1.6.0 |
Check a specific version with /api/v1/cve/match.
References
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html
- http://marc.info/?l=bugtraq&m=134496371727681&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0734.html
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://rhn.redhat.com/errata/RHSA-2013-1456.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
- http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html
- http://www.securityfocus.com/bid/53136
- http://www.securitytracker.com/id?1026941
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16707
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html
- http://marc.info/?l=bugtraq&m=134496371727681&w=2
- http://rhn.redhat.com/errata/RHSA-2012-0734.html
- http://rhn.redhat.com/errata/RHSA-2013-1455.html
- http://rhn.redhat.com/errata/RHSA-2013-1456.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
- http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html
- http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html
- http://www.securityfocus.com/bid/53136
- http://www.securitytracker.com/id?1026941
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16707
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2012-0551