Every CVE Search/ Get API key

CVE-2012-5087

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

10.0 HighFix available

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Exploit likelihood

5.57%Up 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Record
CVE-2012-5087
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Record
CVE-2012-5087
Updated
2026-11-02
EUVDEUVD-2012-5010 No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Record
EUVD-2012-5010
Updated
2026-11-03
GitHub AdvisoriesGHSA-rph6-5363-mw9v No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans.

Record
GHSA-rph6-5363-mw9v
Updated
2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10534-1
Updated
2026-11-02
OSVSUSE-SU-2015:0344-1 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0344-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-3 No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::client
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
Show 27 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::server
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::workstation
 before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-oracle
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-src
Red Hat:rhel_extras:6
 before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-ibm
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1_7_0-openjdk
openSUSE:Tumbleweed
 before 1.7.0.121-1.1
1.7.0.121-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5087 is a high vulnerability (CVSS 10.0) in Oracle Jre, published October 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.57%, the 92nd percentile. Fixed in java-1.7.0-openjdk 1:1.7.0.9-2.3.3.el6_3.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 395 references and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open