{"id":"CVE-2012-0551","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-0551","generatedAt":"2026-11-05T08:21:30.118Z","title":"Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows…","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.","published":"2012-05-03T18:55:02.000Z","lastModified":"2026-06-16T23:37:31.000Z","status":"Modified","sourceIdentifier":"secalert_us@oracle.com","cvss":{"version":"2.0","score":5.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N"},"cwe":[],"affected":["oracle/glassfish server","oracle/jdk","oracle/jre","sun/jdk","sun/jre"],"epss":{"score":0.11388,"percentile":0.96008,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2012-04-22","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":18764,"kind":"exploit","title":"Oracle GlassFish Server 3.1.1 (build 12) - Multiple Cross-Site Scripting Vulnerabilities","url":"https://www.exploit-db.com/exploits/18764","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/webapps/18764.txt","file":"exploits/windows/webapps/18764.txt","published":"2012-04-22","added":"2012-04-22","updated":"2012-04-22","author":"Roberto Suggi Liverani","type":"webapps","platform":"windows","port":null,"verified":false,"codes":["CVE-2012-0551","OSVDB-81250","OSVDB-81237","OSVDB-81236","OSVDB-81235","OSVDB-81234","OSVDB-81233","OSVDB-81232","OSVDB-81231","OSVDB-81230","OSVDB-81229","OSVDB-81228","OSVDB-81227","OSVDB-81226"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://www.security-assessment.com/files/documents/advisory/Oracle_GlassFish_Server_Multiple_XSS.pdf"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 11.4%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=134496371727681&w=2","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0734.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","source":"secalert_us@oracle.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","tags":["Vendor Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html","source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/53136","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id?1026941","source":"secalert_us@oracle.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16707","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134496371727681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/javacpujun2012-1515912.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/53136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16707","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-0551","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}