CVE-2012-4821
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0...
CVE-2012-4821 is a high vulnerability (CVSS 9.3) in Ibm Java, published January 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.90%, the 94th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 6.90%EPSS, 94th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 31 CVEs | before 1:1.7.0.3.0-1jpp.2.el6_3 | 1:1.7.0.3.0-1jpp.2.el6_3 |
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
- Record
CVE-2012-4821- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
- Record
CVE-2012-4821- Updated
- 2026-11-02
EUVDEUVD-2012-4746No score
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
- Record
EUVD-2012-4746- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m96x-9xwr-7g88No score
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0...
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
- Record
GHSA-m96x-9xwr-7g88- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
www-01.ibm.com/support/docview.wss?uid=swg21616616
exchange.xforce.ibmcloud.com/vulnerabilities/78765
seclists.org/bugtraq/2012/Sep/38
Show 148 moreShow less
securityfocus.com/bid/55495
www-304.ibm.com/support/docview.wss?uid=swg21616546
rhn.redhat.com/errata/RHSA-2012-1467.html
secunia.com/advisories/51634
nvd.nist.gov/vuln/detail/CVE-2012-4821
github.com/advisories/GHSA-m96x-9xwr-7g88
access.redhat.com/errata/RHSA-2012:1467
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=829372
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1467.json
cve.org/CVERecord?id=CVE-2011-3544
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
cisa.gov/known-exploited-vulnerabilities-catalog
xforce.iss.net/xforce/xfdb/78764