CVE-2012-1682 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 6 and earlier, potentially impacting confidentiality, integrity, and availability. With a CVSS score of 10.0, it represents a critical risk, allowing unauthenticated remote attackers to exploit it with low attack complexity. While Oracle has not confirmed details, some sources link it to an "XMLDecoder security issue via ClassFinder." There is no evidence of active exploitation, nor is public exploit code available, though it garnered some community discussion and media coverage at the time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:*:update6:*:*:*:*:*:* | ||
1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:* | ||
1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:* | ||
1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:* | ||
1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.