CVE-2012-5076 Oracle Java SE
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.
- CVSS
- not scored
On CISA’s exploited list
Oracle Java SE Sandbox Bypass Vulnerability
- Added
- 2022-03-28
- Federal patch deadline
- 2022-04-18
- Ransomware use
- not known