CVE-2012-4821: Critical severity IBM Java vulnerability
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.
Affected Software
Event History
Frequently Asked Questions
What versions of IBM software are affected by CVE-2012-4821?
CVE-2012-4821 affects multiple versions of IBM Java, including 7 SR2 and earlier, 6.0.1 SR3 and earlier, 5 SR14 and earlier, and several IBM Lotus and Tivoli products.
Is there a patch available to resolve CVE-2012-4821?
Yes, IBM has released updates and patches to address the vulnerabilities associated with CVE-2012-4821.
What should I do if I suspect my system is affected by CVE-2012-4821?
You should immediately apply the latest security updates provided by IBM for the affected software versions to mitigate the risks.
What kind of vulnerabilities does CVE-2012-4821 encompass?
CVE-2012-4821 includes multiple unspecified vulnerabilities within the IBM Java Runtime Environment that could potentially lead to exploitation.
How can I verify if my Java installation is vulnerable to CVE-2012-4821?
You can check the version of your IBM Java installation against the affected versions listed for CVE-2012-4821 to determine if it is vulnerable.