Every CVESearch/Get API key

CVE-2012-5088

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

10.0 HighPublic exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Exploit likelihood

78.7%Down 6.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used10.0

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
CVE-2012-5088
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
CVE-2012-5088
Updated
2026-11-02
EUVDEUVD-2012-5011No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
EUVD-2012-5011
Updated
2026-11-03
GitHub AdvisoriesGHSA-4mvh-76x5-57p4No score

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Record
GHSA-4mvh-76x5-57p4
Updated
2026-11-02
OSVopenSUSE-SU-2024:10534-1No score

java-1_7_0-openjdk-1.7.0.121-1.1 on GA media

These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10534-1
Updated
2026-11-02
OSVSUSE-SU-2015:0344-1No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:0344-1
Updated
2026-11-02
OSVSUSE-SU-2015:1086-3No score

Security update for IBM Java 7

IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.

More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/

Security Issue references:

* CVE-2013-5458
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
 …
Record
SUSE-SU-2015:1086-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::client
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::client
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::client
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::client
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::computenode
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
Show 27 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::computenode
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::server
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::server
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::server
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::server
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk
Red Hat:enterprise_linux:6::workstation
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-demo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-javadoc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-openjdk-src
Red Hat:enterprise_linux:6::workstation
From an advisory covering 20 CVEs
before 1:1.7.0.9-2.3.3.el6_3.1
1:1.7.0.9-2.3.3.el6_3.1
java-1.7.0-oracle
Red Hat:rhel_extras:6
From an advisory covering 27 CVEs
before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-devel
Red Hat:rhel_extras:6
From an advisory covering 27 CVEs
before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-javafx
Red Hat:rhel_extras:6
From an advisory covering 27 CVEs
before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras:6
From an advisory covering 27 CVEs
before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-plugin
Red Hat:rhel_extras:6
From an advisory covering 27 CVEs
before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-oracle-src
Red Hat:rhel_extras:6
From an advisory covering 27 CVEs
before 1:1.7.0.9-1jpp.3.el6_3
1:1.7.0.9-1jpp.3.el6_3
java-1.7.0-ibm
Red Hat:rhel_extras:6
From an advisory covering 31 CVEs
before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-demo
Red Hat:rhel_extras:6
From an advisory covering 31 CVEs
before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-devel
Red Hat:rhel_extras:6
From an advisory covering 31 CVEs
before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:6
From an advisory covering 31 CVEs
before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:6
From an advisory covering 31 CVEs
before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1.7.0-ibm-src
Red Hat:rhel_extras:6
From an advisory covering 31 CVEs
before 1:1.7.0.3.0-1jpp.2.el6_3
1:1.7.0.3.0-1jpp.2.el6_3
java-1_7_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 304 CVEs
before 1.7.0.121-1.1
1.7.0.121-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitJava Applet Method Handle Remote Code Execution2012-10-16
Exploit-DBJava Applet - Method Handle Remote Code Execution (Metasploit)2013-01-24

History

History
RecordedChangedSources
affected, exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5088 is a high vulnerability (CVSS 10.0) in Oracle Jre, published October 16, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 78.7%, the 99th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 391 references and the rest of 2 source descriptions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open