CVE-2012-5074
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
6.4 Medium
CVE-2012-5074 is a medium vulnerability (CVSS 6.4) in Oracle Jre, published October 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 88th percentile. No source names a fixed version.
- Severity
- 6.4 MediumCVSS 2.0, NVD
- Exploit chance
- 3.12%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
Exploit likelihood
3.12%Up 0.9 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 20 CVEs | before 1:1.7.0.9-2.3.3.el6_3.1 | 1:1.7.0.9-2.3.3.el6_3.1 |
java-1.7.0-oracleRed Hat:rhel_extras:6 From an advisory covering 27 CVEs | before 1:1.7.0.9-1jpp.3.el6_3 | 1:1.7.0.9-1jpp.3.el6_3 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 From an advisory covering 27 CVEs | before 1:1.7.0.9-1jpp.3.el6_3 | 1:1.7.0.9-1jpp.3.el6_3 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:6 From an advisory covering 27 CVEs | before 1:1.7.0.9-1jpp.3.el6_3 | 1:1.7.0.9-1jpp.3.el6_3 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 From an advisory covering 27 CVEs | before 1:1.7.0.9-1jpp.3.el6_3 | 1:1.7.0.9-1jpp.3.el6_3 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 From an advisory covering 27 CVEs | before 1:1.7.0.9-1jpp.3.el6_3 | 1:1.7.0.9-1jpp.3.el6_3 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 From an advisory covering 27 CVEs | before 1:1.7.0.9-1jpp.3.el6_3 | 1:1.7.0.9-1jpp.3.el6_3 |
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1_7_0-openjdkopenSUSE:Tumbleweed From an advisory covering 304 CVEs | before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
- Record
CVE-2012-5074- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
- Record
CVE-2012-5074- Updated
- 2026-11-02
EUVDEUVD-2012-4997No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
- Record
EUVD-2012-4997- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9j6r-hxv4-2h2wNo score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.
- Record
GHSA-9j6r-hxv4-2h2w- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0344-1No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0344-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-3No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html
security.gentoo.org/glsa/glsa-201406-32.xml
rhn.redhat.com/errata/RHSA-2012-1386.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16668
securityfocus.com/bid/56056
Show 194 moreShow less
secunia.com/advisories/51029
exchange.xforce.ibmcloud.com/vulnerabilities/79426
oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
nvd.nist.gov/vuln/detail/CVE-2012-5074
github.com/advisories/GHSA-9j6r-hxv4-2h2w
access.redhat.com/errata/RHSA-2012:1386
icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.3/NEWS
bugzilla.redhat.com/show_bug.cgi?id=856124
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1386.json
cve.org/CVERecord?id=CVE-2012-3216
cisa.gov/known-exploited-vulnerabilities-catalog
ibm.com/developerworks/java/jdk/alerts
xforce.iss.net/xforce/xfdb/78764
suse.com/support/update/announcement/2015/suse-su-20150344-1
bugzilla.suse.com/592934
This page doesn't list everything
Left out here: 393 references and the rest of 2 source descriptions. The JSON record has them.