6.8

CVE-2007-3922

Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jdk Updateupdate9 Version <= 1.5.0
Sun ≫ Jdk Updateupdate1 Version <= 1.6.0
Sun ≫ Jre Updateupdate11 Version <= 1.5.0
Sun ≫ Jre Updateupdate1 Version <= 1.6.0
Sun ≫ Sdk Version <= 1.4.2_14
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.98% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P