6.8

CVE-2007-3922

Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SunJdk Updateupdate9 Version <= 1.5.0
SunJdk Updateupdate1 Version <= 1.6.0
SunJre Updateupdate11 Version <= 1.5.0
SunJre Updateupdate1 Version <= 1.6.0
SunSdk Version <= 1.4.2_14
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.98% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P