EXPOSURES › CVE-2012-0507

CVE-2012-0507

CRITICAL ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2012-0507 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 ransomwarerceexploited-in-wildunpatched

Oracle Java SE's Concurrency component had a remotely exploitable arbitrary code execution vulnerability, actively targeted by ransomware actors, highlighting the risk of outdated software in DIB environments.

CVE-2012-0507 allowed remote code execution via an incorrect type vulnerability in Java's Concurrency component. This is a critical risk for DIB organizations using Java, as it can lead to system compromise and non-compliance with NIST 800-171. Immediate patching and vulnerability scanning are essential.

Shame score — The vulnerability's age and active exploitation by ransomware demonstrates a failure to maintain a secure software supply chain and promptly address known risks.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Oracle · vendor Java SE · product

DESCRIPTION

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

SENTIMENT · TRUSTED SOURCES

synthesis severe-fallout -0.60

Oracle faced severe fallout for a critical RCE vulnerability in its Java Runtime Environment, widely recognized as a major security failure.

cooey ↗ severe-fallout -0.80

Severe condemnation for a critical RCE flaw in Oracle's JRE.

"An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code."

app.opencve.io ↗ severe-fallout +0.00