Every CVE Search/ Get API key

CVE-2012-4681

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

9.8 CriticalIn KEVPublic exploitFix available

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

98.5%Up 6.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

Record
CVE-2012-4681
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-284
Updated
2026-11-02
CVE List 9.8

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

Record
CVE-2012-4681
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-02
EUVDEUVD-2012-4606 9.8

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

Record
EUVD-2012-4606
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-fw99-8m5g-58p8 9.8

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.

Record
GHSA-fw99-8m5g-58p8
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-284
Updated
2026-11-02
CISA KEV No score

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.

Record
CVE-2012-4681
Updated
2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10534-1
Updated
2026-11-02
OSVSUSE-SU-2015:0344-1 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0344-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-3 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
Show 26 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.5-2.2.1.el6_3.3
1:1.7.0.5-2.2.1.el6_3.3
java-1.7.0-oracle
Red Hat:rhel_extras:6
 before 1:1.7.0.7-1jpp.5.el6_3
1:1.7.0.7-1jpp.5.el6_3
java-1.7.0-oracle-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.7-1jpp.5.el6_3
1:1.7.0.7-1jpp.5.el6_3
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.7-1jpp.5.el6_3
1:1.7.0.7-1jpp.5.el6_3
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.7-1jpp.5.el6_3
1:1.7.0.7-1jpp.5.el6_3
java-1.7.0-oracle-src
Red Hat:rhel_extras:6
 before 1:1.7.0.7-1jpp.5.el6_3
1:1.7.0.7-1jpp.5.el6_3
java-1.7.0-ibm
Red Hat:rhel_extras:6
 before 1:1.7.0.2.0-1jpp.3.el6_3
1:1.7.0.2.0-1jpp.3.el6_3
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.0.2.0-1jpp.3.el6_3
1:1.7.0.2.0-1jpp.3.el6_3
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.2.0-1jpp.3.el6_3
1:1.7.0.2.0-1jpp.3.el6_3
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.2.0-1jpp.3.el6_3
1:1.7.0.2.0-1jpp.3.el6_3
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.2.0-1jpp.3.el6_3
1:1.7.0.2.0-1jpp.3.el6_3
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.0.2.0-1jpp.3.el6_3
1:1.7.0.2.0-1jpp.3.el6_3
java-1_7_0-openjdk
openSUSE:Tumbleweed
 before 1.7.0.121-1.1
1.7.0.121-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitJava 7 Applet Remote Code Execution2012-08-26
Exploit-DBJava 7 Applet - Remote Code Execution (Metasploit)2012-08-27
PoC in GitHubbenjholla/CVE-2012-4681-Armoring2014-09-26
PoC in GitHubZH3FENG/PoCs-CVE_2012_46812018-01-05

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4681 is a critical vulnerability (CVSS 9.8) in Oracle Java Se, published August 28, 2012. CISA lists it as known to be exploited, since March 3, 2022. EUVD reports exploitation since March 3, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 98.5%, the 99th percentile. Fixed in java-1.7.0-openjdk 1:1.7.0.5-2.2.1.el6_3.3.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 304 references and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open