[
  {"cve_id":"CVE-2012-0507","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency.  NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions.  NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.","exploit_maturity":"Exploited in the wild","published":"2012-06-07","resolved":"MITIGATION-CANDIDATE","severity":"Critical"},
  {"cve_id":"CVE-2012-0506","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to CORBA.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"},
  {"cve_id":"CVE-2012-0505","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"High"},
  {"cve_id":"CVE-2012-0503","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"High"},
  {"cve_id":"CVE-2012-0502","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"MITIGATED-BY-ENVIRONMENT","severity":"Medium"},
  {"cve_id":"CVE-2012-0501","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"},
  {"cve_id":"CVE-2012-0499","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"High"},
  {"cve_id":"CVE-2012-0498","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"High"},
  {"cve_id":"CVE-2012-0497","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"High"},
  {"cve_id":"CVE-2011-3563","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound.","exploit_maturity":"No public exploit","published":"2012-02-15","resolved":"NO-FIX-IDENTIFIED","severity":"Medium"}
]