Unrated severityNVD Advisory· Published Jan 11, 2013· Updated Apr 29, 2026

CVE-2012-4820

Description

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."

Affected products

125

IBM/Lotus Notes Traveler16 versions
cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.2:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:interim_fix_1:*:*:*:*:*:*
IBM/Tivoli Monitoring27 versions
cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*+ 26 more
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*
IBM/Java
cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
Range: >=1.4.2,<=1.4.2.13.13
IBM/Lotus Domino23 versions
cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*
IBM/Lotus Notes29 versions
cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*+ 28 more
- cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes:8.5.4:*:*:*:*:*:*:*
IBM/Lotus Notes Sametime3 versions
cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80407:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80407:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80822:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:lotus_notes_sametime:8.5.1.20100709-1631:*:*:*:advanced_embedded:*:*:*
IBM/Rational Change4 versions
cpe:2.3:a:ibm:rational_change:4.7:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:rational_change:4.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_change:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_change:5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_change:5.3:*:*:*:*:*:*:*
IBM/Rational Host On Demand11 versions
cpe:2.3:a:ibm:rational_host_on-demand:1.6.0.12:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:ibm:rational_host_on-demand:1.6.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:8.0.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:9.0.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:10.0.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:10.0.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:11.0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:11.0.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:11.0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:11.0.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:11.0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_host_on-demand:11.0.6.1:*:*:*:*:*:*:*
IBM/Service Delivery Manager2 versions
cpe:2.3:a:ibm:service_delivery_manager:7.2.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:service_delivery_manager:7.2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:service_delivery_manager:7.2.2.0:*:*:*:*:*:*:*
IBM/Smart Analytics System 5600 Software2 versions
cpe:2.3:a:ibm:smart_analytics_system_5600_software:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:smart_analytics_system_5600_software:-:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:smart_analytics_system_5600_software:9.7:*:*:*:*:*:*:*
IBM/Tivoli Remote Control
cpe:2.3:a:ibm:tivoli_remote_control:5.1.2:*:*:*:*:*:*:*
IBM/Websphere Real Time2 versions
cpe:2.3:a:ibm:websphere_real_time:2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_real_time:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_real_time:3.0:*:*:*:*:*:*:*
Tivoli Storage Productivity Center/50
cpe:2.3:a:tivoli_storage_productivity_center:5.0:*:*:*:*:*:*:*:*
Tivoli Storage Productivity Center/51
cpe:2.3:a:tivoli_storage_productivity_center:5.1:*:*:*:*:*:*:*:*
Tivoli Storage Productivity Center/511
cpe:2.3:a:tivoli_storage_productivity_center:5.1.1:*:*:*:*:*:*:*:*
IBM/Smart Analytics System 5600
cpe:2.3:h:ibm:smart_analytics_system_5600:7200:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

rhn.redhat.com/errata/RHSA-2012-1465.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-1466.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2012-1467.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1455.htmlnvdThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1456.htmlnvdThird Party Advisory
seclists.org/bugtraq/2012/Sep/38nvdMailing ListThird Party Advisory
secunia.com/advisories/51326nvdThird Party Advisory
secunia.com/advisories/51327nvdThird Party Advisory
secunia.com/advisories/51328nvdThird Party Advisory
secunia.com/advisories/51393nvdThird Party Advisory
secunia.com/advisories/51634nvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www-01.ibm.com/support/docview.wssnvdVendor Advisory
www.securityfocus.com/bid/55495nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/78764nvdThird Party AdvisoryVDB Entry
www-304.ibm.com/support/docview.wssnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000