Exploited vulnerability

CVE-2012-5076

TLP:CLEAR

Oracle Java SE Sandbox Bypass Vulnerability

The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.

Facts

Vendor: Oracle
Product: Java SE
CVSS: 9.8
EPSS (probability of exploitation within 30 days): 91.3 %
On CISA's Known Exploited Vulnerabilities list since: 28 March 2022
First known exploitation: 28 March 2022
CISA's deadline for US federal agencies: 18 April 2022
First seen by Risk Letters: 28 March 2022

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD