{"id":"CVE-2012-1723","kind":"vulnerability","aliases":["CVE-2012-1723"],"related":[],"title":"Oracle Java SE: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.","summary":"Oracle Java SE Runtime Environment (JRE) has an unspecified flaw in its Hotspot component that lets remote attackers affect confidentiality, integrity and availability. This is on CISA's known-exploited list and has a very high EPSS score, so exploitation in the wild is likely.","severity":"critical","cvss":10.0,"epss":0.93566,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Oracle Java SE","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["desktop","exploited","java","jre","oracle-java-se","ransomware","runtime","servers"],"not_affected_if":["not-using-oracle-java"],"how_to_check":"Run 'java -version' on each host and compare against the Oracle Java SE release that fixes CVE-2012-1723; unknown which exact versions are affected in the sources.","fix":"Update Oracle Java SE JRE to a release that includes the Oracle security patch for CVE-2012-1723, per vendor instructions (CISA required action: apply updates).","status":"open","published_at":"2012-06-16T21:55:03+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:07+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-23T21:26:07Z","model":"claude-haiku-5-5","output":{"fix":"Update Oracle Java SE JRE to a release that includes the Oracle security patch for CVE-2012-1723, per vendor instructions (CISA required action: apply updates).\nunknown","reach":"internet","impact":"high","summary":"Oracle Java SE Runtime Environment (JRE) has an unspecified flaw in its Hotspot component that lets remote attackers affect confidentiality, integrity and availability. This is on CISA's known-exploited list and has a very high EPSS score, so exploitation in the wild is likely.","category":"runtime","who_cares":["java","jre","oracle-java-se","desktop","servers"],"confidence":0.5,"needs_auth":"no","worst_case":"Remote attacker may execute arbitrary code and fully compromise the affected Java runtime host.","analyst_note":"Find the affected and fixed Oracle Java SE version ranges and the Oracle CPU advisory for CVE-2012-1723 (2012 CPU); sources give no version data.","how_to_check":"Run 'java -version' on each host and compare against the Oracle Java SE release that fixes CVE-2012-1723; unknown which exact versions are affected in the sources.\nunknown","needs_analyst":true,"not_affected_if":["not-using-oracle-java"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000526,"input_tokens":2873,"output_tokens":478,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1723':16A,19A '-2012':15A,18A '1.4.2':109C '32':100C '35':105C '37':110C '4':95C '5':103C '6':98C '7':93C 'affect':52B,117C 'allow':113C 'arbitrari':10A 'attack':51B,115C 'avail':56B,121C 'cisa':60B 'code':11A 'compon':47B,88C 'confidenti':53B,118C 'cve':14A,17A 'desktop':23B 'earlier':97C,102C,107C,112C 'environ':8A,38B,86C 'epss':71B 'execut':12A 'exploit':24B,64B,74B 'flaw':43B 'high':70B 'hotspot':46B,127C 'integr':54B,119C 'java':2A,5A,21A,25B,29B,35B,84C,91C 'jre':9A,26B,39B,87C 'known':63B 'known-exploit':62B 'let':49B 'like':79B 'list':65B 'oracl':1A,4A,28B,34B,90C 'oracle':20A 'oracle-java-s':27B 'ransomwar':31B 'relat':125C 'remot':50B,114C 'runtim':7A,32B,37B,85C 'score':72B 'se':3A,6A,22A,30B,36B,92C 'server':33B 'unknown':123C 'unspecifi':42B,80C 'updat':94C,99C,104C 'vector':124C 'via':122C 'vulner':13A,81C 'wild':77B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2012-06-16T21:55:03+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2012-1723","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1723","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T13:39:32+00:00","note":null},{"source":"epss","external_id":"CVE-2012-1723","url":"https://api.first.org/data/v1/epss?cve=CVE-2012-1723","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2012-1723","url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1723","severity":null,"published_at":"2012-06-16T21:55:03+00:00","modified_at":"2026-08-06T05:16:33+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}