CVE-2011-3553

2011-10-1921:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2011-3553

java

oracle

jdk

jre

vulnerability

jaxws

nvd

7.9 High

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

57.2%

JSON

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.

CPENameOperatorVersion
sun:jresun jreeq1.7.0
sun:jdksun jdkeq1.7.0
oracle:jrockitoracle jrockitler28.1.4
oracle:jrockitoracle jrockiteqr28.1.0
oracle:jrockitoracle jrockiteqr28.1.1
oracle:jrockitoracle jrockiteqr28.1.3
oracle:jrockitoracle jrockiteqr28.0.1
oracle:jrockitoracle jrockiteqr28.0.2
oracle:jrockitoracle jrockiteqr28.0.0
sun:jdksun jdkeq1.6.0

CPE	Name	Operator	Version
sun:jre	sun jre	eq	1.7.0
sun:jdk	sun jdk	eq	1.7.0
oracle:jrockit	oracle jrockit	le	r28.1.4
oracle:jrockit	oracle jrockit	eq	r28.1.0
oracle:jrockit	oracle jrockit	eq	r28.1.1
oracle:jrockit	oracle jrockit	eq	r28.1.3
oracle:jrockit	oracle jrockit	eq	r28.0.1
oracle:jrockit	oracle jrockit	eq	r28.0.2
oracle:jrockit	oracle jrockit	eq	r28.0.0
sun:jdk	sun jdk	eq	1.6.0