Lucene search

K
cve[email protected]CVE-2008-5347
HistoryDec 05, 2008 - 11:30 a.m.

CVE-2008-5347

2008-12-0511:30:00
CWE-264
web.nvd.nist.gov
52
cve-2008-5347
java
jre
sun jdk
update 10
jax-ws
jaxb
inner classes
privilege escalation
security vulnerabilities

8.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.

CPENameOperatorVersion
sun:jresun jreeq6
sun:jdksun jdkeq6

References

8.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%