Apply updates per vendor instructions.
Evidence dossier
CVE-2012-1723
CVE-2012-1723
83.9–99.4Priority evidence range
gen-56ccdaf9Normalized restatement
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- State
- PUBLISHED
- Published
- Jun 16, 2012
- Updated
- Oct 22, 2025
- Evidence coverage
- 72%
2026-07-18 · v2026.06.15 · percentile 99.8%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
oracleoriginal assertion
container
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Jul 19, 2026Original evidence ↗
CISA KEVoriginal assertion
observed_exploitation
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Jul 19, 2026Original evidence ↗
FIRST EPSSoriginal assertion
model_probability
Probability 0.936880000000; percentile 0.998290000000
Jul 19, 2026Original evidence ↗
Applicability
Cited product scope
n/an/a
[{"status": "affected", "version": "n/a"}]unknownUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*; end including 1.4.2_37supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update10:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update11:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update12:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update13:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update14:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update15:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update16:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update17:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update18:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update19:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update20:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update21:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update22:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update23:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update24:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update25:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update26:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update27:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update28:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update29:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update3:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update30:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update31:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update32:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update33:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update34:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.5.0:update35:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update11:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update12:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update13:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update14:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update15:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update16:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update17:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update18:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update19:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update20:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update21:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update22:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update23:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update24:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update25:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update26:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update27:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update29:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update3:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update30:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update31:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update32:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update32_b31:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.6.0:update32_b32:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.7.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*; end including 1.4.2_37supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update10:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update11:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update12:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update13:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update14:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update15:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update16:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update17:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update18:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update19:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update20:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update21:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update22:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update23:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update24:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update25:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update26:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update27:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update28:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update29:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update3:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update30:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update31:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update32:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update33:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update34:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.5.0:update35:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update10:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update11:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update12:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update13:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update14:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update15:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update16:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update17:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update18:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update19:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update20:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update21:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update3:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update30:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update31:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.6.0:update32:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:a:redhat:icedtea6:*:*:*:*:*:*:*:*; end excluding 1.10.8supportedUnknown vendorUnknown product
cpe:2.3:a:redhat:icedtea6:*:*:*:*:*:*:*:*; start including 1.11.0; end excluding 1.11.3supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*supportedUnknown vendorUnknown product
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*supportedAssessments
CVSS by origin
nvd@nist.govCVSS 2.0 · role Primary
AV:N/AC:L/Au:N/C:C/I:C/A:C134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADPCVSS 3.1 · role unknown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.