VULNERABILITY INTELLIGENCE

CVE-2012-3136

CVSS score10 HIGH

EPSS probability5.40%

CISA KEVNot currently listed

Published2012-08-30

Last modified2026-06-16

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."