ZeroDay Findings
Sign inSign up

Findings

CVE-2012-1723

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Published Jun 16, 2012 · updated Aug 5, 2026 · oracle jdk

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 16, 2012 · Catalog

    Detected

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 5, 2026 · Catalog

    Updated

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Required action

Apply updates per vendor instructions.

CISA due date Mar 24, 2022

Affected

  • cpe oracle/jdkversion unspecified
  • cpe oracle/jdk1.5.0
  • cpe redhat/icedtea6version unspecified
  • vendor Oracle Java SEversion unspecified

Sources

  • CISA KEVCVE-2012-1723

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.

    cisa.gov
  • CVE.orgCVE-2012-1723

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2012-1723

    30-day exploitation probability 93.7%

    first.org
  • Exploit Database19717

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_multi/browser/java_verifier_field_access

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2012-1723

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknow

    nvd.nist.gov

References

CVE-2012-1723 · ZeroDay Findings