Every CVE Search/ Get API key

CVE-2012-5088

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

10.0 HighPublic exploitFix available

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Exploit likelihood

78.7%Down 6.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
CVE-2012-5088
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
CVE-2012-5088
Updated
2026-11-02
EUVDEUVD-2012-5011 No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
EUVD-2012-5011
Updated
2026-11-03
GitHub AdvisoriesGHSA-4mvh-76x5-57p4 No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
GHSA-4mvh-76x5-57p4
Updated
2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10534-1
Updated
2026-11-02
OSVSUSE-SU-2015:0344-1 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0344-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-3 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
Show 27 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-oracle
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-src
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-ibm
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1_7_0-openjdk
openSUSE:Tumbleweed
 before 1.7.0.121-1.1
1.7.0.121-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBJava Applet - Method Handle Remote Code Execution (Metasploit)2013-01-24
MetasploitJava Applet Method Handle Remote Code Execution2012-10-16

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5088 is a high vulnerability (CVSS 10.0) in Oracle Jre, published October 16, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 78.7%, the 99th percentile. Fixed in java-1.7.0-openjdk 1:1.7.0.9-2.3.3.el6_3.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 391 references and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open