CVE-2012-3136
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
10.0 High
CVE-2012-3136 is a high vulnerability (CVSS 10.0) in Oracle Jre, published August 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.95%, the 90th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 3.95%EPSS, 90th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
Exploit likelihood
3.95%Up 2.6 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 1:1.7.0.5-2.2.1.el6_3.3 | 1:1.7.0.5-2.2.1.el6_3.3 |
java-1.7.0-oracleRed Hat:rhel_extras:6 From an advisory covering 4 CVEs | before 1:1.7.0.7-1jpp.5.el6_3 | 1:1.7.0.7-1jpp.5.el6_3 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 From an advisory covering 4 CVEs | before 1:1.7.0.7-1jpp.5.el6_3 | 1:1.7.0.7-1jpp.5.el6_3 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 From an advisory covering 4 CVEs | before 1:1.7.0.7-1jpp.5.el6_3 | 1:1.7.0.7-1jpp.5.el6_3 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 From an advisory covering 4 CVEs | before 1:1.7.0.7-1jpp.5.el6_3 | 1:1.7.0.7-1jpp.5.el6_3 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 From an advisory covering 4 CVEs | before 1:1.7.0.7-1jpp.5.el6_3 | 1:1.7.0.7-1jpp.5.el6_3 |
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1_7_0-openjdkopenSUSE:Tumbleweed From an advisory covering 304 CVEs | before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
- Record
CVE-2012-3136- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
- Record
CVE-2012-3136- Updated
- 2026-11-02
EUVDEUVD-2012-3114No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
- Record
EUVD-2012-3114- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5jvp-8v86-8h9wNo score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
- Record
GHSA-5jvp-8v86-8h9w- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0344-1No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0344-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-3No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
marc.info?l=bugtraq&m=135109152819176&w=2
oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html
rhn.redhat.com/errata/RHSA-2012-1225.html
secunia.com/advisories/51044
nvd.nist.gov/vuln/detail/CVE-2012-3136
Show 194 moreShow less
github.com/advisories/GHSA-5jvp-8v86-8h9w
access.redhat.com/errata/RHSA-2012:1223
bugzilla.redhat.com/show_bug.cgi?id=852051
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1223.json
cve.org/CVERecord?id=CVE-2012-0547
cisa.gov/known-exploited-vulnerabilities-catalog
ibm.com/developerworks/java/jdk/alerts
suse.com/support/update/announcement/2015/suse-su-20150344-1
bugzilla.suse.com/592934
This page doesn't list everything
Left out here: 295 references and the rest of 2 source descriptions. The JSON record has them.