CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2012-08-28
Oracle Java SE 7 SecurityManager Bypass and Remote Code Execution Vulnerability (CVE-2012-4681) Technical Advisory
[Affected Scope] Oracle Java SE 7 Update 6 and earlier JRE (Java Runtime Environment) versions
[Impact] Remote attackers can completely bypass SecurityManager restrictions and execute arbitrary code with elevated privileges via a crafted malicious applet
[Mitigation] Immediately upgrade to Java SE 7 Update 7 or later, or disable the Java browser plugin across all endpoints