Lucene search

[email protected]NVD:CVE-2008-3115

HistoryJul 09, 2008 - 11:41 p.m.

CVE-2008-3115

2008-07-0923:41:00

CWE-16

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

High

EPSS

0.249

Percentile

96.7%

JSON

Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.

Affected configurations

Nvd

Node

sunjdkRange≤6update_6

sunjdkMatch5.0update_10

sunjdkMatch5.0update_11

sunjdkMatch5.0update_12

sunjdkMatch5.0update_13

sunjdkMatch5.0update_14

sunjdkMatch5.0update_15

sunjdkMatch5.0update_6

sunjdkMatch5.0update_7

sunjdkMatch5.0update_8

sunjdkMatch5.0update_9

sunjdkMatch6update_1

sunjdkMatch6update_2

sunjdkMatch6update_3

sunjdkMatch6update_4

sunjdkMatch6update_5

sunjreRange≤6update_6

sunjreMatch5.0update_10

sunjreMatch5.0update_11

sunjreMatch5.0update_12

sunjreMatch5.0update_13

sunjreMatch5.0update_14

sunjreMatch5.0update_15

sunjreMatch5.0update_6

sunjreMatch5.0update_7

sunjreMatch5.0update_8

sunjreMatch5.0update_9

sunjreMatch6update_1

sunjreMatch6update_2

sunjreMatch6update_3

sunjreMatch6update_4

sunjreMatch6update_5

VendorProductVersionCPE
sunjdk*cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*
sunjdk5.0cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	jdk	*	cpe:2.3:a:sun:jdk::update_6::::::*
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_10::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_11::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_12::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_13::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_14::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_15::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_6::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_7::::::
sun	jdk	5.0	cpe:2.3:a:sun:jdk:5.0:update_8::::::