2 matches found
SUSE CVE-2012-4420
An information disclosure flaw was found in the way the Java Virtual Machine JVM implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation in certain circumstances they had nonzero elements right after the allocation. A remote attacker cou...
7.5CVSS7.1AI score0.04512EPSS
SaveExploits1References3
CVE-2022-37027
Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacker can enable JMX services and...
7.5AI score0.21732EPSS
SaveExploits1References5
20