Servers and applications
CVE-2012-5085
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated users to have an unspecified impact via unknown vectors related to Networking. NOTE: the Oracle CPU states that this issue has a 0.0 CVSS score. If so, then this is not a…
- Severity
- Low
- Published
- 16 Oct 2012
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 22 Oct 2026
- Exploit chance
- 2.2% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · Needs a login
- CVSS vector
AV:N/AC:M/Au:S/C:N/I:N/A:N- Sources
- NVD
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated users to have an unspecified impact via unknown vectors related to Networking. NOTE: the Oracle CPU states that this issue has a 0.0 CVSS score. If so, then this is not a vulnerability and this issue should not be included in CVE.
Affected software
| Software | Affected versions |
|---|---|
JavaServers and applications · cpe:a:oracle:jdk |
All 23 release lines
|
JavaServers and applications · cpe:a:oracle:jre |
All 23 release lines
|