{"schema_version":"1","data":[{"id":2860,"advisory_id":"49d9d98e-b2d1-4a9a-86f4-17f4900bf114","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-0507","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:50.7296+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2012-0507"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","summary":"An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-0507","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-0507","aliases":["CVE-2012-0507"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-0507","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0507","dueDate":"2022-03-24","product":"Java SE","dateAdded":"2022-03-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2012-0507","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2857,"advisory_id":"74ccb014-e21f-4f4f-b14b-6c505f3d220d","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1723","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:48.773091+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2012-1723"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","summary":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-1723","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-1723","aliases":["CVE-2012-1723"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-1723","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1723","dueDate":"2022-03-24","product":"Java SE","dateAdded":"2022-03-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2012-1723","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2856,"advisory_id":"70b646f9-f0cd-4743-86d4-5fb4c3b68979","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4681","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:47.970779+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2012-4681"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","summary":"The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-4681","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-4681","aliases":["CVE-2012-4681"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-4681","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-4681","dueDate":"2022-03-24","product":"Java SE","dateAdded":"2022-03-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2012-4681","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2842,"advisory_id":"cb2efc77-4a38-4a5b-835a-59b5d6361370","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2590","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:38.383826+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2015-2590"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","summary":"An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2590","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2590","aliases":["CVE-2015-2590"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-2590","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2590","dueDate":"2022-03-24","product":"Java SE","dateAdded":"2022-03-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.","vulnerabilityName":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2590","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2839,"advisory_id":"546580a1-a497-4718-8175-3aa104c19984","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4902","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:36.280684+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2015-4902"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE Integrity Check Vulnerability","summary":"Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-4902","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-4902","aliases":["CVE-2015-4902"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2015-4902","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4902","dueDate":"2022-03-24","product":"Java SE","dateAdded":"2022-03-03","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.","vulnerabilityName":"Oracle Java SE Integrity Check Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-4902","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2680,"advisory_id":"7ad4fd5d-8abb-46f0-abf1-1849916e08c4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-5076","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:26.481838+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2012-5076"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE Sandbox Bypass Vulnerability","summary":"The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2012-5076","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2012-5076","aliases":["CVE-2012-5076"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2012-5076","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5076","dueDate":"2022-04-18","product":"Java SE","dateAdded":"2022-03-28","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.","vulnerabilityName":"Oracle Java SE Sandbox Bypass Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2012-5076","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":2677,"advisory_id":"6e1c8123-facc-4313-a045-008c1c2476be","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-2465","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:24.763975+00:00","extraction_method":"structured","technologies":["core-kev","java-se"],"cve_ids":["CVE-2013-2465"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Oracle Java SE Unspecified Vulnerability","summary":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-2465","products":[{"name":{"value":"Java SE","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-2465","aliases":["CVE-2013-2465"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2013-2465","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2465","dueDate":"2022-04-18","product":"Java SE","dateAdded":"2022-03-28","vendorProject":"Oracle","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D","vulnerabilityName":"Oracle Java SE Unspecified Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2013-2465","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false}],"next_after":2860,"next_before":2677}