Description
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
References (17)
Core 17
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616616
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616594
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/78765
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616617
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21621154
Mailing List, Third Party Advisory mailing-list
x_refsource_bugtraq
http://seclists.org/bugtraq/2012/Sep/38
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616652
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV29659
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/55495
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21615800
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616490
Vendor Advisory x_refsource_confirm
https://www-304.ibm.com/support/docview.wss?uid=swg21616546
Third Party Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1467.html
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21616708
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51634
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21615705
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51326
Scores
EPSS
0.0690
EPSS Percentile
93.4%
Details
Status
published
Products (50)
ibm/java
1.4.2 - 1.4.2.13.13
ibm/lotus_domino
8.0
ibm/lotus_domino
8.0.1
ibm/lotus_domino
8.0.2
ibm/lotus_domino
8.0.2.1
ibm/lotus_domino
8.0.2.2
ibm/lotus_domino
8.0.2.3
ibm/lotus_domino
8.0.2.4
ibm/lotus_domino
8.5.0
ibm/lotus_domino
8.5.0.1
... and 40 more
Published
Jan 11, 2013
Tracked Since
Feb 18, 2026