Lucene search

[email protected]NVD:CVE-2012-4822

HistoryJan 11, 2013 - 12:55 a.m.

CVE-2012-4822

2013-01-1100:55:01

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.4

Confidence

High

EPSS

0.829

Percentile

98.4%

JSON

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to “insecure use [of] multiple methods in the java.lang.class class.”

Affected configurations

Nvd

Node

ibmjavaRange1.4.2–1.4.2.13.13

ibmjavaRange5.0.0.0–5.0.14.0

ibmjavaRange6.0.0.0–6.0.11.0

ibmjavaRange7.0.0.0–7.0.2.0

ibmlotus_dominoMatch8.0

ibmlotus_dominoMatch8.0.1

ibmlotus_dominoMatch8.0.2

ibmlotus_dominoMatch8.0.2.1

ibmlotus_dominoMatch8.0.2.2

ibmlotus_dominoMatch8.0.2.3

ibmlotus_dominoMatch8.0.2.4

ibmlotus_dominoMatch8.5.0

ibmlotus_dominoMatch8.5.0.1

ibmlotus_dominoMatch8.5.1

ibmlotus_dominoMatch8.5.1.1

ibmlotus_dominoMatch8.5.1.2

ibmlotus_dominoMatch8.5.1.3

ibmlotus_dominoMatch8.5.1.4

ibmlotus_dominoMatch8.5.1.5

ibmlotus_dominoMatch8.5.2.0

ibmlotus_dominoMatch8.5.2.1

ibmlotus_dominoMatch8.5.2.2

ibmlotus_dominoMatch8.5.2.3

ibmlotus_dominoMatch8.5.2.4

ibmlotus_dominoMatch8.5.3.0

ibmlotus_dominoMatch8.5.3.1

ibmlotus_dominoMatch8.5.3.2

ibmlotus_notesMatch8.0

ibmlotus_notesMatch8.0.0

ibmlotus_notesMatch8.0.1

ibmlotus_notesMatch8.0.2

ibmlotus_notesMatch8.0.2.0

ibmlotus_notesMatch8.0.2.1

ibmlotus_notesMatch8.0.2.2

ibmlotus_notesMatch8.0.2.3

ibmlotus_notesMatch8.0.2.4

ibmlotus_notesMatch8.0.2.5

ibmlotus_notesMatch8.0.2.6

ibmlotus_notesMatch8.5

ibmlotus_notesMatch8.5.0.0

ibmlotus_notesMatch8.5.0.1

ibmlotus_notesMatch8.5.1

ibmlotus_notesMatch8.5.1.0

ibmlotus_notesMatch8.5.1.1

ibmlotus_notesMatch8.5.1.2

ibmlotus_notesMatch8.5.1.3

ibmlotus_notesMatch8.5.1.4

ibmlotus_notesMatch8.5.1.5

ibmlotus_notesMatch8.5.2.0

ibmlotus_notesMatch8.5.2.1

ibmlotus_notesMatch8.5.2.2

ibmlotus_notesMatch8.5.2.3

ibmlotus_notesMatch8.5.3

ibmlotus_notesMatch8.5.3.1

ibmlotus_notesMatch8.5.3.2

ibmlotus_notesMatch8.5.4

ibmlotus_notes_sametimeMatch8.0.80407

ibmlotus_notes_sametimeMatch8.0.80822

ibmlotus_notes_sametimeMatch8.5.1.20100709-1631advanced_embedded

ibmlotus_notes_travelerMatch8.0

ibmlotus_notes_travelerMatch8.0.1

ibmlotus_notes_travelerMatch8.0.1.2

ibmlotus_notes_travelerMatch8.0.1.3

ibmlotus_notes_travelerMatch8.5.0.0

ibmlotus_notes_travelerMatch8.5.0.1

ibmlotus_notes_travelerMatch8.5.0.2

ibmlotus_notes_travelerMatch8.5.1.1

ibmlotus_notes_travelerMatch8.5.1.2

ibmlotus_notes_travelerMatch8.5.1.3

ibmlotus_notes_travelerMatch8.5.2.1

ibmlotus_notes_travelerMatch8.5.3

ibmlotus_notes_travelerMatch8.5.3.1

ibmlotus_notes_travelerMatch8.5.3.2

ibmlotus_notes_travelerMatch8.5.3.3

ibmlotus_notes_travelerMatch8.5.3.3interim_fix_1

ibmrational_changeMatch4.7

ibmrational_changeMatch5.1

ibmrational_changeMatch5.2

ibmrational_changeMatch5.3

ibmrational_host_on-demandMatch1.6.0.12

ibmrational_host_on-demandMatch8.0.8.0

ibmrational_host_on-demandMatch9.0.8.0

ibmrational_host_on-demandMatch10.0.9.0

ibmrational_host_on-demandMatch10.0.10.0

ibmrational_host_on-demandMatch11.0.3.0

ibmrational_host_on-demandMatch11.0.4.0

ibmrational_host_on-demandMatch11.0.5.0

ibmrational_host_on-demandMatch11.0.5.1

ibmrational_host_on-demandMatch11.0.6.0

ibmrational_host_on-demandMatch11.0.6.1

ibmservice_delivery_managerMatch7.2.1.0

ibmservice_delivery_managerMatch7.2.2.0

ibmsmart_analytics_system_5600_softwareMatch-

ibmsmart_analytics_system_5600_softwareMatch9.7

ibmtivoli_monitoringMatch6.1.0

ibmtivoli_monitoringMatch6.1.0.7

ibmtivoli_monitoringMatch6.2.0

ibmtivoli_monitoringMatch6.2.0.1

ibmtivoli_monitoringMatch6.2.0.2

ibmtivoli_monitoringMatch6.2.0.3

ibmtivoli_monitoringMatch6.2.1

ibmtivoli_monitoringMatch6.2.1.0

ibmtivoli_monitoringMatch6.2.1.1

ibmtivoli_monitoringMatch6.2.1.2

ibmtivoli_monitoringMatch6.2.1.3

ibmtivoli_monitoringMatch6.2.1.4

ibmtivoli_monitoringMatch6.2.2

ibmtivoli_monitoringMatch6.2.2.0

ibmtivoli_monitoringMatch6.2.2.1

ibmtivoli_monitoringMatch6.2.2.2

ibmtivoli_monitoringMatch6.2.2.3

ibmtivoli_monitoringMatch6.2.2.4

ibmtivoli_monitoringMatch6.2.2.5

ibmtivoli_monitoringMatch6.2.2.6

ibmtivoli_monitoringMatch6.2.2.7

ibmtivoli_monitoringMatch6.2.2.8

ibmtivoli_monitoringMatch6.2.2.9

ibmtivoli_monitoringMatch6.2.3

ibmtivoli_monitoringMatch6.2.3.0

ibmtivoli_monitoringMatch6.2.3.1

ibmtivoli_monitoringMatch6.2.3.2

ibmtivoli_remote_controlMatch5.1.2

ibmwebsphere_real_timeMatch2.0

ibmwebsphere_real_timeMatch3.0

tivoli_storage_productivity_center5.0

tivoli_storage_productivity_center5.1

tivoli_storage_productivity_center5.1.1

ibmsmart_analytics_system_5600Match7200

VendorProductVersionCPE
ibmjava*cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
ibmlotus_domino8.0cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*
ibmlotus_domino8.0.1cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.1cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.2cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.3cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*
ibmlotus_domino8.0.2.4cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*
ibmlotus_domino8.5.0cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*
ibmlotus_domino8.5.0.1cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	java	*	cpe:2.3:a:ibm:java::::::::
ibm	lotus_domino	8.0	cpe:2.3:a:ibm:lotus_domino:8.0:::::::*
ibm	lotus_domino	8.0.1	cpe:2.3:a:ibm:lotus_domino:8.0.1:::::::*
ibm	lotus_domino	8.0.2	cpe:2.3:a:ibm:lotus_domino:8.0.2:::::::*
ibm	lotus_domino	8.0.2.1	cpe:2.3:a:ibm:lotus_domino:8.0.2.1:::::::*
ibm	lotus_domino	8.0.2.2	cpe:2.3:a:ibm:lotus_domino:8.0.2.2:::::::*
ibm	lotus_domino	8.0.2.3	cpe:2.3:a:ibm:lotus_domino:8.0.2.3:::::::*
ibm	lotus_domino	8.0.2.4	cpe:2.3:a:ibm:lotus_domino:8.0.2.4:::::::*
ibm	lotus_domino	8.5.0	cpe:2.3:a:ibm:lotus_domino:8.5.0:::::::*
ibm	lotus_domino	8.5.0.1	cpe:2.3:a:ibm:lotus_domino:8.5.0.1:::::::*

Rows per page:

1-10 of 1251

References

rhn.redhat.com/errata/RHSA-2012-1465.html

rhn.redhat.com/errata/RHSA-2012-1466.html

rhn.redhat.com/errata/RHSA-2012-1467.html

rhn.redhat.com/errata/RHSA-2013-1455.html

rhn.redhat.com/errata/RHSA-2013-1456.html

seclists.org/bugtraq/2012/Sep/38

secunia.com/advisories/51326

secunia.com/advisories/51327

secunia.com/advisories/51328

secunia.com/advisories/51393

secunia.com/advisories/51634

www-01.ibm.com/support/docview.wss?uid=swg1IV29665

www-01.ibm.com/support/docview.wss?uid=swg21615705

www-01.ibm.com/support/docview.wss?uid=swg21615800

www-01.ibm.com/support/docview.wss?uid=swg21616490

www-01.ibm.com/support/docview.wss?uid=swg21616594

www-01.ibm.com/support/docview.wss?uid=swg21616616

www-01.ibm.com/support/docview.wss?uid=swg21616617

www-01.ibm.com/support/docview.wss?uid=swg21616652

www-01.ibm.com/support/docview.wss?uid=swg21616708

www-01.ibm.com/support/docview.wss?uid=swg21621154

www-01.ibm.com/support/docview.wss?uid=swg21631786

www.securityfocus.com/bid/55495

exchange.xforce.ibmcloud.com/vulnerabilities/78766

www-304.ibm.com/support/docview.wss?uid=swg21616546

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.4

Confidence

High

EPSS

0.829

Percentile

98.4%

JSON

Related for NVD:CVE-2012-4822

cve1 prion1 checkpoint_advisories1 cvelist1 nessus7 ibm7 redhat6 veracode22