Design/Logic Flaw

2013-01-1422:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.094 Low

EPSS

Percentile

94.6%

JSON

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114.

CPENameOperatorVersion
jdkeq1.7.0 update6
jdkeq1.7.0 update5
jdkeq1.7.0 update7
jdkeq1.7.0 update2
jdkeq1.7.0
jdkeq1.7.0 update9
jdkeq1.7.0 update3
jdkeq1.7.0 update1
jdkeq1.7.0 update10
jdkeq1.7.0 update4

Name	Operator	Version
jdk	eq	1.7.0 update6
jdk	eq	1.7.0 update5
jdk	eq	1.7.0 update7
jdk	eq	1.7.0 update2
jdk	eq	1.7.0
jdk	eq	1.7.0 update9
jdk	eq	1.7.0 update3
jdk	eq	1.7.0 update1
jdk	eq	1.7.0 update10
jdk	eq	1.7.0 update4