What is the severity of CVE-2012-4681?

CVE-2012-4681 has a CVSS v3 score of 9.8, which is classified as Critical severity.

Is there an exploit available for CVE-2012-4681?

Yes, there are known exploits available for CVE-2012-4681. Immediate patching is recommended.

Is there a patch available for CVE-2012-4681?

Yes, patches are available for CVE-2012-4681. Check the vendor advisories for update instructions.

CVE Database Threat Actors Research API Docs

Visit Strobes.co Sign Up for Strobes

CVE Database Threat Actors Research API Docs

Tools

KB Lookup

Visit Strobes.co Sign Up for Strobes

HomeCVEs

Do you like the insights?

Strobes vulnerability intelligence is a key component of their Exposure Management platform that helps organizations understand, prioritize, and address security vulnerabilities more effectively.

CVE-2012-4681 - CVE Details, Severity, and Analysis | Strobes VI

Home CVEsCVE-2012-4681

CVE-2012-4681

Published: January 27, 2026

Last updated:1 day ago (January 27, 2026)

Exploit: YesZero-day: YesPatch: YesTrend: Neutral

TL;DR

Updated January 27, 2026

CVE-2012-4681 is a critical severity vulnerability with a CVSS score of 9.8. Exploits are available; patches have been released and should be applied urgently. This is classified as a zero-day vulnerability.

Key Points

1Critical severity (CVSS 9.8/10)
2EPSS: 94.00% - very high likelihood of exploitation
3

Severity Scores

CVSS v39.8

CVSS v210.0

Priority Score928.0

EPSS Score94.0

Critical

Cite This Page

APA Format

Strobes VI. (2026). CVE-2012-4681 - CVE Details and Analysis. Strobes VI. Retrieved January 28, 2026, from https://vi.strobes.co/cve/CVE-2012-4681

Quick copy link + title

Please cite this page when referencing data from Strobes VI. Proper attribution helps support our vulnerability intelligence research.

Public exploits are available

4Vendor patches are available

5Strobes Priority Score: 928/1000 (Critical)

6Affects products from: Oracle, Redhat

Exploitation LikelihoodCritical

94.00%EPSS

Very high probability of exploitation in the next 30 days

Immediate patching required

94.00%

EPSS

9.8

CVSS

Yes

Exploit

Yes

Patch

Critical Priority

high EPSS • exploit exists • critical severity • high priority

EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.

Description

The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.

CVSS v3 Breakdown

Attack Vector:Network

Attack Complexity:Local

Privileges Required:Network

User Interaction:Network

Scope:Unchanged

Confidentiality:High

Integrity:High

Availability:High

Exploit References

Cisa.gov Labs.alienvault.com Metasploit GitHub GitHub [email protected][email protected]Snort

Patch References

[email protected]Zeroday CZ

Trend Analysis

Neutral

Vulnerable Products

Vendor	Product
Oracle	Jdk
Oracle	Jre
Redhat	Enterprise Linux Server
Redhat	Enterprise Linux Desktop
Redhat	Enterprise Linux Workstation
Redhat	Enterprise Linux Eus

Advisories

CISA: The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.

GitHub Advisory NVD