{"id":"CVE-2012-0508","description":"Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX, 1.3.0 and earlier, and 1.2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.","cvssScore":10,"cvssVersion":"2.0","cvssVector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","cvssMetrics":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"resolved":"OUT-OF-SCOPE","published":"2012-02-15","lastModified":"2026-06-16","affectedProducts":[{"vendor":"oracle","product":"javafx","versionEnd":"\u003c=1.2.2"},{"vendor":"oracle","product":"javafx","version":"1.3.0"}],"totalAffectedProducts":1,"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=134254866602253\u0026w=2","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=134254957702612\u0026w=2","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=134496371727681\u0026w=2","source":"secalert_us@oracle.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpufeb2012-366318.html","source":"secalert_us@oracle.com","tags":["Vendor Advisory"]}],"reasoning":{"decidingSource":"oracle-component","decidingReason":"This CVE affects Oracle's JavaFX component, which Waratek RASP does not instrument. Oracle does not assign JavaFX its own CPE product, so this is detected from the CVE description rather than CPE data.","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"no-match"},{"rule":"armr-secure-rule-file","stage":"scope","outcome":"no-match"},{"rule":"manual-classification","stage":"scope","outcome":"no-match"},{"rule":"h2-history","stage":"scope","outcome":"withheld","detail":"Historical environment classification superseded by the dedicated javafx component rule"},{"rule":"non-java-upstream","stage":"scope","outcome":"no-match"},{"rule":"oracle-component","stage":"scope","outcome":"matched","status":"OUT-OF-SCOPE","detail":"Description names the \"JavaFX\" component (\"component: JavaFX\")","decisive":true}]},"oracleAdvisories":[{"advisory":"Java SE CPU Feb 2012","releaseType":"CPU","quarter":"2012-Q1","url":"https://www.oracle.com/security-alerts/javacpufeb2012.html","products":[{"product":"Oracle Java SE","component":"JavaFX","affectedVersions":"JavaFX 1.3.0 and before, 1.2.2 and before"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"none"},"action":{"state":"not-needed","type":"none"},"review":{"state":"automated","basis":"inferred"}},"h2Comments":"## Manual Classification Context\n\n\n**Labels:** -, MULTIPLE, SEE NOTE 3, NO AUTH REMOTE EXPLOIT\n\n**Products:** ORACLE JAVA SE, JAVAFX","signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.04028,"percentile":0.90013},"ssvc":{"available":false}}