Field Assessment
AI analysis pending.
Cross-Reference — CISA KEV
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2022-03-28
Required action: Apply updates per vendor instructions.
CVE
CVE-2012-5076
Severity
CRITICAL
CVSS
9.8
EPSS
91.01%
Oracle Java
Original Filing — NVD Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.