Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…
Priority LOW 34Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · Partial
- Fix status
- Partial Red Hat: 23 fixed, 1 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.
Why it matters now
EPSS 0.02806 86th percentileScored 2026-11-07
Fix Partial Red Hat: 8 advisoriesRed Hat: 23 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 99
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:* | up to 1.4.2_35 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:* | 1.4.2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* | 1.4.2_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* | 1.4.2_2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* | 1.4.2_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* | 1.4.2_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* | 1.4.2_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* | 1.4.2_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* | 1.4.2_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* | 1.4.2_8 | Vulnerable | Sun |
- cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:* Versions up to 1.4.2_35 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* Versions 1.4.2_1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* Versions 1.4.2_2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* Versions 1.4.2_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* Versions 1.4.2_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* Versions 1.4.2_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* Versions 1.4.2_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* Versions 1.4.2_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* Versions 1.4.2_8 Vulnerable ·Sun
Show 89 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* | 1.4.2_9 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* | 1.4.2_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* | 1.4.2_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* | 1.4.2_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* | 1.4.2_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:* | 1.4.2_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:* | 1.4.2_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:* | 1.4.2_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:* | 1.4.2_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:* | 1.4.2_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:* | 1.4.2_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:* | 1.4.2_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:* | 1.4.2_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:* | 1.4.2_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:* | 1.4.2_23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:* | 1.4.2_24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:* | 1.4.2_25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:* | 1.4.2_26 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:* | 1.4.2_27 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:* | 1.4.2_28 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:* | 1.4.2_29 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:* | 1.4.2_30 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:* | 1.4.2_31 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:* | 1.4.2_32 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:* | 1.4.2_33 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:* | 1.4.2_34 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:*:update33:*:*:*:*:*:* | up to 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* | 1.5.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* | 1.5.0 update10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:* | 1.5.0 update11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:* | 1.5.0 update12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:* | 1.5.0 update13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:* | 1.5.0 update14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:* | 1.5.0 update15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:* | 1.5.0 update16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:* | 1.5.0 update17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:* | 1.5.0 update18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:* | 1.5.0 update19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* | 1.5.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:* | 1.5.0 update20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:* | 1.5.0 update21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:* | 1.5.0 update22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:* | 1.5.0 update23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:* | 1.5.0 update24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:* | 1.5.0 update25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:* | 1.5.0 update26 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:* | 1.5.0 update27 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:* | 1.5.0 update28 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:* | 1.5.0 update29 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* | 1.5.0 update3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:* | 1.5.0 update31 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* | 1.5.0 update4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* | 1.5.0 update5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* | 1.5.0 update6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* | 1.5.0 update7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* | 1.5.0 update8 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* | 1.5.0 update9 | Vulnerable | Sun |
| cpe:2.3:a:oracle:jre:*:update30:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:* | 1.6.0 update22 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:* | 1.6.0 update23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:* | 1.6.0 update24 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:* | 1.6.0 update25 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:* | 1.6.0 update26 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:* | 1.6.0 update27 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:* | 1.6.0 update29 | Vulnerable | Oracle |
| cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* | 1.6.0 update_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* | 1.6.0 update_2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:* | 1.6.0 update_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
| cpe:2.3:a:oracle:jre:*:update2:*:*:*:*:*:* | up to 1.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:* | 1.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:* | 1.7.0 update1 | Vulnerable | Oracle |
- cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* Versions 1.4.2_9 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* Versions 1.4.2_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* Versions 1.4.2_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* Versions 1.4.2_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* Versions 1.4.2_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:* Versions 1.4.2_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:* Versions 1.4.2_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:* Versions 1.4.2_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:* Versions 1.4.2_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:* Versions 1.4.2_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:* Versions 1.4.2_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:* Versions 1.4.2_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:* Versions 1.4.2_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:* Versions 1.4.2_22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:* Versions 1.4.2_23 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:* Versions 1.4.2_24 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_25:*:*:*:*:*:*:* Versions 1.4.2_25 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_26:*:*:*:*:*:*:* Versions 1.4.2_26 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_27:*:*:*:*:*:*:* Versions 1.4.2_27 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_28:*:*:*:*:*:*:* Versions 1.4.2_28 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_29:*:*:*:*:*:*:* Versions 1.4.2_29 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_30:*:*:*:*:*:*:* Versions 1.4.2_30 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_31:*:*:*:*:*:*:* Versions 1.4.2_31 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_32:*:*:*:*:*:*:* Versions 1.4.2_32 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_33:*:*:*:*:*:*:* Versions 1.4.2_33 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.4.2_34:*:*:*:*:*:*:* Versions 1.4.2_34 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:*:update33:*:*:*:*:*:* Versions up to 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* Versions 1.5.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* Versions 1.5.0 update10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:* Versions 1.5.0 update11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:* Versions 1.5.0 update12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:* Versions 1.5.0 update13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:* Versions 1.5.0 update14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:* Versions 1.5.0 update15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:* Versions 1.5.0 update16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:* Versions 1.5.0 update17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:* Versions 1.5.0 update18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:* Versions 1.5.0 update19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* Versions 1.5.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:* Versions 1.5.0 update20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:* Versions 1.5.0 update21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:* Versions 1.5.0 update22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:* Versions 1.5.0 update23 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:* Versions 1.5.0 update24 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:* Versions 1.5.0 update25 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:* Versions 1.5.0 update26 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:* Versions 1.5.0 update27 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:* Versions 1.5.0 update28 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:* Versions 1.5.0 update29 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* Versions 1.5.0 update3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:* Versions 1.5.0 update31 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* Versions 1.5.0 update4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* Versions 1.5.0 update5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* Versions 1.5.0 update6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* Versions 1.5.0 update7 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* Versions 1.5.0 update8 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* Versions 1.5.0 update9 Vulnerable ·Sun
- cpe:2.3:a:oracle:jre:*:update30:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:* Versions 1.6.0 update22 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:* Versions 1.6.0 update23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:* Versions 1.6.0 update24 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:* Versions 1.6.0 update25 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:* Versions 1.6.0 update26 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:* Versions 1.6.0 update27 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:* Versions 1.6.0 update29 Vulnerable ·Oracle
- cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* Versions 1.6.0 update_1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* Versions 1.6.0 update_2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:* Versions 1.6.0 update_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
- cpe:2.3:a:oracle:jre:*:update2:*:*:*:*:*:* Versions up to 1.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:* Versions 1.7.0 update1 Vulnerable ·Oracle
Remediation
Red Hat 8 advisories
- RHSA-2013:1455 Released 2013-10-23 · Red Hat rating LowRed Hat Network Satellite server IBM Java Runtime security update
- Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9, java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.i386, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el5_9 +1
- Red Hat Satellite 5.4 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4
- RHSA-2012:1080 Released 2012-07-16 · Red Hat rating Moderatejava-1.4.2-ibm-sap security update
- RHEL 5 Server for SAP java-1.4.2-ibm-sap-1.4.2.13.12.sap-1jpp.2.el5, java-1.4.2-ibm-sap-demo-1.4.2.13.12.sap-1jpp.2.el5, java-1.4.2-ibm-sap-devel-1.4.2.13.12.sap-1jpp.2.el5 +2
- RHSA-2012:0702 Released 2012-05-30 · Red Hat rating Criticaljava-1.4.2-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.12-1jpp.1.el5_8, java-1.4.2-ibm-1.4.2.13.12-1jpp.1.el5_8.i386, java-1.4.2-ibm-demo-1.4.2.13.12-1jpp.1.el5_8 +9
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm-1.4.2.13.12-1jpp.1.el5_8, java-1.4.2-ibm-1.4.2.13.12-1jpp.1.el5_8.i386, java-1.4.2-ibm-1.4.2.13.12-1jpp.1.el5_8.ia64 +20
Show 5 more Red Hat advisories
- RHSA-2012:0514 Released 2012-04-24 · Red Hat rating Criticaljava-1.6.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.10.1-1jpp.1.el5 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +5
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +4
- RHSA-2012:0508 Released 2012-04-23 · Red Hat rating Criticaljava-1.5.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.13.1-1jpp.1.el5 +11
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.13.1-1jpp.1.el5.ppc +20
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +7
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-demo-1:1.5.0.13.1-1jpp.2.el6_2, java-1.5.0-ibm-devel-1:1.5.0.13.1-1jpp.2.el6_2 +4
- RHSA-2012:0322 Released 2012-02-21 · Red Hat rating Importantjava-1.6.0-openjdk security update
- Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8, java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.25.1.10.6.el5_8 +7
- Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8, java-1.6.0-openjdk-1:1.6.0.0-1.25.1.10.6.el5_8.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.25.1.10.6.el5_8 +7
- RHSA-2012:0139 Released 2012-02-16 · Red Hat rating Criticaljava-1.6.0-sun security update
- Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el4 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.31-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.31-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el5 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-devel-1:1.6.0.31-1jpp.1.el6_2 +3
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el4 +9
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-devel-1:1.6.0.31-1jpp.1.el6_2 +1
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.31-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.31-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el5 +9
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-devel-1:1.6.0.31-1jpp.1.el6_2 +3
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.31-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el4 +9
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-demo-1:1.6.0.31-1jpp.1.el6_2, java-1.6.0-sun-devel-1:1.6.0.31-1jpp.1.el6_2 +3
- RHSA-2012:0135 Released 2012-02-14 · Red Hat rating Criticaljava-1.6.0-openjdk security update
- Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2 +2
- Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2 +2
- Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-src-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-devel-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.43.1.10.6.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-demo-1:1.6.0.0-1.43.1.10.6.el6_2, java-1.6.0-openjdk-src-1:1.6.0.0-1.43.1.10.6.el6_2
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 4 | Affected | No fix yet |
| RHEL 5 Server for SAP | Fixed | RHSA-2012:1080 |
| Red Hat Desktop version 4 Extras | Fixed | RHSA-2012:0139 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2012:0322 |
| Red Hat Enterprise Linux AS version 4 Extras | Fixed | RHSA-2012:0139 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2012:0322 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2012:0139, RHSA-2012:0508, RHSA-2012:0514, RHSA-2012:0702 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2012:0139, RHSA-2012:0508, RHSA-2012:0514 |
| Red Hat Enterprise Linux ES version 4 Extras | Fixed | RHSA-2012:0139 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2012:0139, RHSA-2012:0508, RHSA-2012:0514 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2012:0139, RHSA-2012:0508, RHSA-2012:0514, RHSA-2012:0702 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2012:0139, RHSA-2012:0508, RHSA-2012:0514 |
| Red Hat Enterprise Linux WS version 4 Extras | Fixed | RHSA-2012:0139 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:0135 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2012:0139, RHSA-2012:0508, RHSA-2012:0514 |
| Red Hat Satellite 5.4 (RHEL v.5) | Fixed | RHSA-2013:1455 |
| Red Hat Satellite 5.4 (RHEL v.6) | Fixed | RHSA-2013:1455 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-0502
- 2026-10-03 Alias added: GHSA-m25x-m489-rqr9
References
Advisory 19
- HPSBUX02784
- http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
- SUSE-SU-2012:1013
- GLSA-201406-32
- HPSBMU02799
- SUSE-SU-2012:0881
- SSRT100805
- SUSE-SU-2012:0734
- SUSE-SU-2012:0602
- RHSA-2013:1455
- SUSE-SU-2012:0603
- HPSBUX02757
- DSA-2420
- RHSA-2012:0508
- SSRT100867
- RHSA-2012:0514
- RHSA-2012:1080
- HPSBUX02777
- RHSA-2012:0702
Sources
- CVE-2012-0502 · CVE Program
- CVE-2012-0502 · NVD
- FIRST EPSS
- GHSA-m25x-m489-rqr9 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-0502 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences