SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2012-5081

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to…

MEDIUM 5.0EPSS 45.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 45.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
45.11% probability · 99th percentile
CISA KEV
Not listed
Affected
oracle/jdk · oracle/jre · sun/jdk · sun/jre
Source
secalert_us@oracle.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.