Servers and applications
CVE-2012-5072 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors related to Security.
Severity Medium 5.0
Published 16 Oct 2012
Last changed 16 Jun 2026
Added to UpHeron 22 Oct 2026 Exploit chance 3.4% in the next 30 daysHigher than 89% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Read some data
CVSS vector AV:N/AC:L/Au:N/C:P/I:N/A:N
Sources NVD Affected software Software Affected versions JavaServers and applications · cpe:a:oracle:jdk Version 1.7.0-update6 Version 1.7.0-update5 Version 1.7.0-update4 Version 1.7.0-update3 All 21 release lines Every version up to 1.7.0 Every version up to 1.6.0 Version 1.6.0-update22 Version 1.6.0-update23 Version 1.6.0-update24 Version 1.6.0-update25 Version 1.6.0-update26 Version 1.6.0-update27 Version 1.6.0-update29 Version 1.6.0-update30 Version 1.6.0-update31 Version 1.6.0-update32 Version 1.6.0-update33 Version 1.6.0-update34 Version 1.7.0 Version 1.7.0-update1 Version 1.7.0-update2 Version 1.7.0-update3 Version 1.7.0-update4 Version 1.7.0-update5 Version 1.7.0-update6 JavaServers and applications · cpe:a:oracle:jre Version 1.7.0-update6 Version 1.7.0-update5 Version 1.7.0-update4 Version 1.7.0-update3 All 21 release lines Every version up to 1.7.0 Every version up to 1.6.0 Version 1.6.0-update22 Version 1.6.0-update23 Version 1.6.0-update24 Version 1.6.0-update25 Version 1.6.0-update26 Version 1.6.0-update27 Version 1.6.0-update29 Version 1.6.0-update30 Version 1.6.0-update31 Version 1.6.0-update32 Version 1.6.0-update33 Version 1.6.0-update34 Version 1.7.0 Version 1.7.0-update1 Version 1.7.0-update2 Version 1.7.0-update3 Version 1.7.0-update4 Version 1.7.0-update5 Version 1.7.0-update6
References NVD https://nvd.nist.gov/vuln/detail/CVE-2012-5072 CVE.org https://www.cve.org/CVERecord?id=CVE-2012-5072