CVE-2012-5076
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
91.3%
99.8th percentile
CISA KEV
Listed
Added 2022-03-28 · patch by 2022-04-18
Weakness / dates
—
Published — · modified —
Description
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.