Lucene search

K
cve[email protected]CVE-2012-4821
HistoryJan 11, 2013 - 12:55 a.m.

CVE-2012-4821

2013-01-1100:55:01
web.nvd.nist.gov
46
cve-2012-4821
ibm java
jre
vulnerability
arbitrary code execution
security
exploit

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

5.5 Medium

AI Score

Confidence

High

0.124 Low

EPSS

Percentile

95.5%

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via “insecure use” of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

Affected configurations

NVD
Node
ibmjavaRange1.4.21.4.2.13.13
OR
ibmjavaRange5.0.0.05.0.14.0
OR
ibmjavaRange6.0.0.06.0.11.0
OR
ibmjavaRange7.0.0.07.0.2.0
OR
ibmlotus_dominoMatch8.0
OR
ibmlotus_dominoMatch8.0.1
OR
ibmlotus_dominoMatch8.0.2
OR
ibmlotus_dominoMatch8.0.2.1
OR
ibmlotus_dominoMatch8.0.2.2
OR
ibmlotus_dominoMatch8.0.2.3
OR
ibmlotus_dominoMatch8.0.2.4
OR
ibmlotus_dominoMatch8.5.0
OR
ibmlotus_dominoMatch8.5.0.1
OR
ibmlotus_dominoMatch8.5.1
OR
ibmlotus_dominoMatch8.5.1.1
OR
ibmlotus_dominoMatch8.5.1.2
OR
ibmlotus_dominoMatch8.5.1.3
OR
ibmlotus_dominoMatch8.5.1.4
OR
ibmlotus_dominoMatch8.5.1.5
OR
ibmlotus_dominoMatch8.5.2.0
OR
ibmlotus_dominoMatch8.5.2.1
OR
ibmlotus_dominoMatch8.5.2.2
OR
ibmlotus_dominoMatch8.5.2.3
OR
ibmlotus_dominoMatch8.5.2.4
OR
ibmlotus_dominoMatch8.5.3.0
OR
ibmlotus_dominoMatch8.5.3.1
OR
ibmlotus_dominoMatch8.5.3.2
OR
ibmlotus_notesMatch8.0
OR
ibmlotus_notesMatch8.0.0
OR
ibmlotus_notesMatch8.0.1
OR
ibmlotus_notesMatch8.0.2
OR
ibmlotus_notesMatch8.0.2.0
OR
ibmlotus_notesMatch8.0.2.1
OR
ibmlotus_notesMatch8.0.2.2
OR
ibmlotus_notesMatch8.0.2.3
OR
ibmlotus_notesMatch8.0.2.4
OR
ibmlotus_notesMatch8.0.2.5
OR
ibmlotus_notesMatch8.0.2.6
OR
ibmlotus_notesMatch8.5
OR
ibmlotus_notesMatch8.5.0.0
OR
ibmlotus_notesMatch8.5.0.1
OR
ibmlotus_notesMatch8.5.1
OR
ibmlotus_notesMatch8.5.1.0
OR
ibmlotus_notesMatch8.5.1.1
OR
ibmlotus_notesMatch8.5.1.2
OR
ibmlotus_notesMatch8.5.1.3
OR
ibmlotus_notesMatch8.5.1.4
OR
ibmlotus_notesMatch8.5.1.5
OR
ibmlotus_notesMatch8.5.2.0
OR
ibmlotus_notesMatch8.5.2.1
OR
ibmlotus_notesMatch8.5.2.2
OR
ibmlotus_notesMatch8.5.2.3
OR
ibmlotus_notesMatch8.5.3
OR
ibmlotus_notesMatch8.5.3.1
OR
ibmlotus_notesMatch8.5.3.2
OR
ibmlotus_notesMatch8.5.4
OR
ibmlotus_notes_sametimeMatch8.0.80407
OR
ibmlotus_notes_sametimeMatch8.0.80822
OR
ibmlotus_notes_sametimeMatch8.5.1.20100709-1631advanced_embedded
OR
ibmlotus_notes_travelerMatch8.0
OR
ibmlotus_notes_travelerMatch8.0.1
OR
ibmlotus_notes_travelerMatch8.0.1.2
OR
ibmlotus_notes_travelerMatch8.0.1.3
OR
ibmlotus_notes_travelerMatch8.5.0.0
OR
ibmlotus_notes_travelerMatch8.5.0.1
OR
ibmlotus_notes_travelerMatch8.5.0.2
OR
ibmlotus_notes_travelerMatch8.5.1.1
OR
ibmlotus_notes_travelerMatch8.5.1.2
OR
ibmlotus_notes_travelerMatch8.5.1.3
OR
ibmlotus_notes_travelerMatch8.5.2.1
OR
ibmlotus_notes_travelerMatch8.5.3
OR
ibmlotus_notes_travelerMatch8.5.3.1
OR
ibmlotus_notes_travelerMatch8.5.3.2
OR
ibmlotus_notes_travelerMatch8.5.3.3
OR
ibmlotus_notes_travelerMatch8.5.3.3interim_fix_1
OR
ibmrational_changeMatch4.7
OR
ibmrational_changeMatch5.1
OR
ibmrational_changeMatch5.2
OR
ibmrational_changeMatch5.3
OR
ibmrational_host_on-demandMatch1.6.0.12
OR
ibmrational_host_on-demandMatch8.0.8.0
OR
ibmrational_host_on-demandMatch9.0.8.0
OR
ibmrational_host_on-demandMatch10.0.9.0
OR
ibmrational_host_on-demandMatch10.0.10.0
OR
ibmrational_host_on-demandMatch11.0.3.0
OR
ibmrational_host_on-demandMatch11.0.4.0
OR
ibmrational_host_on-demandMatch11.0.5.0
OR
ibmrational_host_on-demandMatch11.0.5.1
OR
ibmrational_host_on-demandMatch11.0.6.0
OR
ibmrational_host_on-demandMatch11.0.6.1
OR
ibmservice_delivery_managerMatch7.2.1.0
OR
ibmservice_delivery_managerMatch7.2.2.0
OR
ibmsmart_analytics_system_5600_softwareMatch-
OR
ibmsmart_analytics_system_5600_softwareMatch9.7
OR
ibmtivoli_monitoringMatch6.1.0
OR
ibmtivoli_monitoringMatch6.1.0.7
OR
ibmtivoli_monitoringMatch6.2.0
OR
ibmtivoli_monitoringMatch6.2.0.1
OR
ibmtivoli_monitoringMatch6.2.0.2
OR
ibmtivoli_monitoringMatch6.2.0.3
OR
ibmtivoli_monitoringMatch6.2.1
OR
ibmtivoli_monitoringMatch6.2.1.0
OR
ibmtivoli_monitoringMatch6.2.1.1
OR
ibmtivoli_monitoringMatch6.2.1.2
OR
ibmtivoli_monitoringMatch6.2.1.3
OR
ibmtivoli_monitoringMatch6.2.1.4
OR
ibmtivoli_monitoringMatch6.2.2
OR
ibmtivoli_monitoringMatch6.2.2.0
OR
ibmtivoli_monitoringMatch6.2.2.1
OR
ibmtivoli_monitoringMatch6.2.2.2
OR
ibmtivoli_monitoringMatch6.2.2.3
OR
ibmtivoli_monitoringMatch6.2.2.4
OR
ibmtivoli_monitoringMatch6.2.2.5
OR
ibmtivoli_monitoringMatch6.2.2.6
OR
ibmtivoli_monitoringMatch6.2.2.7
OR
ibmtivoli_monitoringMatch6.2.2.8
OR
ibmtivoli_monitoringMatch6.2.2.9
OR
ibmtivoli_monitoringMatch6.2.3
OR
ibmtivoli_monitoringMatch6.2.3.0
OR
ibmtivoli_monitoringMatch6.2.3.1
OR
ibmtivoli_monitoringMatch6.2.3.2
OR
ibmtivoli_remote_controlMatch5.1.2
OR
ibmwebsphere_real_timeMatch2.0
OR
ibmwebsphere_real_timeMatch3.0
OR
tivoli_storage_productivity_center5.0
OR
tivoli_storage_productivity_center5.1
OR
tivoli_storage_productivity_center5.1.1
OR
ibmsmart_analytics_system_5600Match7200

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

5.5 Medium

AI Score

Confidence

High

0.124 Low

EPSS

Percentile

95.5%

Related for CVE-2012-4821