CVE-2012-4823: IBM Java

High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."

Affected products

IBM Java: from 1.4.2, up to and including 1.4.2.13.13; from 5.0.0.0, up to and including 5.0.14.0; from 6.0.0.0, up to and including 6.0.11.0; from 7.0.0.0, up to and including 7.0.2.0
IBM Lotus Domino: version 8.0 only; version 8.0.1 only; version 8.0.2 only; version 8.0.2.1 only; version 8.0.2.2 only; version 8.0.2.3 only; …
IBM Lotus Notes: version 8.0 only; version 8.0.0 only; version 8.0.1 only; version 8.0.2 only; version 8.0.2.0 only; version 8.0.2.1 only; …
IBM Lotus Notes Sametime: version 8.0.80407 only; version 8.0.80822 only; version 8.5.1.20100709-1631 only
IBM Lotus Notes Traveler: version 8.0 only; version 8.0.1 only; version 8.0.1.2 only; version 8.0.1.3 only; version 8.5.0.0 only; version 8.5.0.1 only; …
IBM Rational Change: version 4.7 only; version 5.1 only; version 5.2 only; version 5.3 only
IBM Rational Host On-Demand: version 1.6.0.12 only; version 8.0.8.0 only; version 9.0.8.0 only; version 10.0.9.0 only; version 10.0.10.0 only; version 11.0.3.0 only; …
IBM Service Delivery Manager: version 7.2.1.0 only; version 7.2.2.0 only
IBM Smart Analytics System 5600: version 7200 only
IBM Smart Analytics System 5600 Software: affected versions not specified; version 9.7 only
IBM Tivoli Monitoring: version 6.1.0 only; version 6.1.0.7 only; version 6.2.0 only; version 6.2.0.1 only; version 6.2.0.2 only; version 6.2.0.3 only; …
IBM Tivoli Remote Control: version 5.1.2 only
IBM WebSphere Real Time: version 2.0 only; version 3.0 only
Tivoli Storage Productivity Center 5.0: any version
Tivoli Storage Productivity Center 5.1: any version
Tivoli Storage Productivity Center 5.1.1: any version

Published 2013-01-11. Last modified 2026-06-16.