Every CVE Search/ Get API key

CVE-2012-4821

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0...

9.3 HighFix available

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Exploit likelihood

6.90%Down 5.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Record
CVE-2012-4821
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Record
CVE-2012-4821
Updated
2026-11-02
EUVDEUVD-2012-4746 No score

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Record
EUVD-2012-4746
Updated
2026-11-03
GitHub AdvisoriesGHSA-m96x-9xwr-7g88 No score

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0...

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Record
GHSA-m96x-9xwr-7g88
Updated
2026-11-02

Affected products

Show 4 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
java-1.7.0-ibm
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-4821 is a high vulnerability (CVSS 9.3) in Ibm Java, published January 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.90%, the 94th percentile. Fixed in java-1.7.0-ibm 1:1.7.0.3.0-1jpp.2.el6_3.

References

Show 148 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open