Unscored severity · published Oct 17, 2012
CVE-2012-3202
Multiple unspecified vulnerabilities in the Oracle JRockit component in Oracle Fusion Middleware 28.2.4 and earlier, and 27.7.3 and earlier, when using JDK/JRE 5 or 6, allow…
–
CVSS
4.8%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in the Oracle JRockit component in Oracle Fusion Middleware 28.2.4 and earlier, and 27.7.3 and earlier, when using JDK/JRE 5 or 6, allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this overlaps CVE-2012-5083, CVE-2012-1531, CVE-2012-5081, and CVE-2012-5085.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JR
Jrockit · Oracle
r27.7.0 through r27.7.3; r28.2.0 through r28.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3202
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3202
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
Third Party Advisory
http://www.securityfocus.com/bid/56050
More from Jrockit
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.0
CVE-2018-3183
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting)
9.0
CVE-2017-3241
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI)
8.3
CVE-2018-3149
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
8.3
CVE-2018-2633
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)