CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
EPSS
Percentile
93.9%
Unspecified vulnerability in the Java Plug-in in Java SE Development Kit
(JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6
Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier
allows remote attackers to access files and execute arbitrary code via
unknown vectors related to “deserializing applets,” aka CR 6646860.