Java SE CPU Jun 2012

Released June 2012 · Oracle's advisory ↗ · ← Critical Patch Update, April 2012 · Critical Patch Update, July 2012 →

14 CVEs in this release, one square each

By status

1Mitigation candidate 4No exploit published 9Outside Waratek scope 1Exploited, marked by the ring

No exploit published. For 2 of them, Oracle's security advisory is the source of public detail.

Look up CVE IDs Status Exploitation Severity

Reset

Overview 14 matches · 5 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5

14matches 5in Waratek scope35.7% 0protected0.0% 1exploited7.1% 1CISA KEV7.1% 2public PoC14.3% 1EPSS ≥ 0.57.1%

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 7.1% No exploit published 4 28.6% Outside Waratek scope 9 64.3% Not applicable 0 0.0% Withdrawn CVE 0 0.0%

Critical 1 7.1% High 6 42.9% Medium 5 35.7% Low 2 14.3% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 1 7.1% Working exploit published 1 7.1% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 12 85.7%

split by StatusSeverityProtectionExploit maturity peak 13 / month

May 121 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 Jun 1213 No exploit published4 Outside Waratek scope9 Critical1 High6 Medium4 Low2 not blocked13 Exploited1 No public exploit12

May 12Jun 12

14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2012-1726	Medium	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVE-2012-1725	High	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2012-1724	Medium	2012-06-16	No exploit published	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect availability, related to JAXP.
CVE-2012-1723	Critical	2012-06-16	Outside Waratek scope	Exploited	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2012-1722	High	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.
CVE-2012-1721	High	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1722.
CVE-2012-1720	Low	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.
CVE-2012-1719	Medium	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect integrity, related to CORBA.
CVE-2012-1718	Medium	2012-06-16	No exploit published	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
CVE-2012-1717	Low	2012-06-16	No exploit published	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.
CVE-2012-1716	High	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVE-2012-1713	High	2012-06-16	No exploit published	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVE-2012-1711	High	2012-06-16	Outside Waratek scope	No public exploit	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to CORBA.
CVE-2012-0551	Medium	2012-05-03	Mitigation candidate	Working exploit published	Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2012-1726

Medium

2012-06-16

Outside Waratek scope

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVE-2012-1725

High

2012-06-16

Outside Waratek scope

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVE-2012-1724

Medium

2012-06-16

No exploit published

No public exploit

CVE-2012-1723

Critical

2012-06-16

Outside Waratek scope

Exploited

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVE-2012-1722

High

2012-06-16

Outside Waratek scope

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2012-1721.

CVE-2012-1721

High

2012-06-16

Outside Waratek scope

No public exploit

CVE-2012-1720

Low

2012-06-16

Outside Waratek scope

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.

CVE-2012-1719

Medium

2012-06-16

Outside Waratek scope

No public exploit

CVE-2012-1718

Medium

2012-06-16

No exploit published

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect availability via unknown vectors related to Security.

CVE-2012-1717

Low

2012-06-16

No exploit published

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux.

CVE-2012-1716

High

2012-06-16

Outside Waratek scope

No public exploit

CVE-2012-1713

High

2012-06-16

No exploit published

No public exploit

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVE-2012-1711

High

2012-06-16

Outside Waratek scope

No public exploit

CVE-2012-0551

Medium

2012-05-03

Mitigation candidate

Working exploit published

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.