A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2012-5076

Oracle Java SE Sandbox Bypass Vulnerability

Published
2022-03-28
Modified
2026-07-31
Sources
cisa-kev

Summary

The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.