Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:14288
HistoryMay 02, 2019 - 4:46 a.m.

Sandbox Restrictions Bypass

2019-05-0204:46:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

openjdk is vulnerable to sandbox restrictions bypass. An improper permission check issue was discovered in the reflection API in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.

References

Related

checkpoint_advisories 4
securityvulns 2
threatpost 11
zdt 1
ibm 7
packetstorm 1
seebug 3
symantec 1
thn 3
saint 8
canvas 1
cisa_kev 1
metasploit 1
exploitdb 1
prion 2
nessus 18
openvas 21
redhat 3
zdi 1
ubuntu 1
cert 1
centos 1
cve 2
oraclelinux 1
fedora 3
suse 2
freebsd 1
ubuntucve 2
attackerkb 1
fireeye 1
securelist 1
gentoo 1
checkpoint_advisories
checkpoint_advisories
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
2014-02-03 00:00:00
Oracle Java MBeanInstantiator.findClass Remote Code Execution - Ver2 (CVE-2013-0422)
2014-01-07 00:00:00
Oracle Java JmxMBeanServer Package Sandbox Breach (CVE-2013-0422)
2013-01-13 00:00:00
securityvulns
securityvulns
0-day vulnerability in Oracle Java is used to install maliscious software
2013-01-21 00:00:00
[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable
2013-01-21 00:00:00
threatpost
threatpost
NBC Website Hacked, Leading Visitors to Citadel Banking Malware
2013-02-21 21:07:10
ADP-Themed Phishing Emails Lead to Blackhole Sites
2013-01-14 18:29:21
Emergency Zero-Day Patch Does Not Quiet Calls to Disable Java
2013-01-14 16:40:39
zdt
zdt
Java Applet JMX Remote Code Execution Vulnerability
2013-01-11 00:00:00
ibm
ibm
Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Collaborative Lifecycle Management products (CVE-2013-0422)
2018-06-17 04:42:53
Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Change (CVE-2013-0422)
2018-06-17 04:42:58
Security Bulletin: Potential security vulnerabilities in WebSphere Partner Gateway Advanced/Enterprise for the Oracle CPU February 2013.
2022-09-25 23:13:40
packetstorm
packetstorm
Java Applet JMX Remote Code Execution
2013-01-11 00:00:00
seebug
seebug
Oracle Java 7 JmxMBeanServer็ฑป่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒๆผๆดž
2013-01-14 00:00:00
Java Applet JMX Remote Code Execution
2014-07-01 00:00:00
Oracle Java Runtime Environment ๆœชๆ˜Ž่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒๆผๆดž(CVE-2012-3174)
2013-01-16 00:00:00
symantec
symantec
Oracle Java Runtime Environment CVE-2013-0422 Multiple Remote Code Execution Vulnerabilities
2013-01-10 00:00:00
thn
thn
Oracle Patches Java Zero Day Vulnerability
2013-01-16 06:01:00
Oracle Patches Java Zero Day Vulnerability
2013-01-16 17:01:00
ICEPOL Ransomware Servers seized by Romanian Police that infected 260,000 Computers
2014-01-29 22:48:00
saint
saint
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
Java MBeanInstantiator.findClass and Recursive Reflection Sandbox Escape
2013-01-14 00:00:00
canvas
canvas
Immunity Canvas: JAVA_MBEANINSTANTIATOR_FINDCLASS
2013-01-10 21:55:00
cisa_kev
cisa_kev
Oracle JRE Remote Code Execution Vulnerability
2022-05-25 00:00:00
metasploit
metasploit
Java Applet JMX Remote Code Execution
2013-01-10 19:30:43
exploitdb
exploitdb
Java Applet JMX - Remote Code Execution (Metasploit) (1)
2013-01-11 00:00:00
prion
prion
Design/Logic Flaw
2013-01-14 22:55:00
Design/Logic Flaw
2013-01-10 21:55:00
nessus
nessus
Fedora 16 : java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16 (2013-0888)
2013-01-17 00:00:00
Ubuntu 12.10 : openjdk-7 vulnerabilities (USN-1693-1)
2013-01-17 00:00:00
Oracle Java SE 7 <= Update 10 Remote Code Execution
2012-01-10 00:00:00
openvas
openvas
RedHat Update for java-1.7.0-openjdk RHSA-2013:0165-01
2013-01-21 00:00:00
Fedora Update for java-1.7.0-openjdk FEDORA-2013-0853
2013-01-21 00:00:00
Oracle Java SE Multiple Remote Code Execution Vulnerabilities (Windows)
2013-01-17 00:00:00
redhat
redhat
(RHSA-2013:0156) Critical: java-1.7.0-oracle security update
2013-01-14 00:00:00
(RHSA-2013:0165) Important: java-1.7.0-openjdk security update
2013-01-16 00:00:00
(RHSA-2013:0626) Critical: java-1.7.0-ibm security update
2013-03-11 00:00:00
zdi
zdi
Oracle Java Runtime Environment MethodHandle Security Manager Bypass Remote Code Execution Vulnerability
2013-02-01 00:00:00
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2013-01-16 00:00:00
cert
cert
Java 7 fails to restrict access to privileged code
2013-01-10 00:00:00
centos
centos
java security update
2013-01-16 20:29:20
cve
cve
CVE-2012-3174
2013-01-14 22:55:00
CVE-2013-0422
2013-01-10 21:55:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2013-01-16 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc18
2013-01-16 19:35:17
[SECURITY] Fedora 17 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc17
2013-01-16 19:42:39
[SECURITY] Fedora 16 Update: java-1.7.0-openjdk-1.7.0.9-2.3.4.fc16
2013-01-16 19:49:12
suse
suse
java-1_7_0-openjdk: update to icedtea-2.3.4 (critical)
2013-01-25 14:04:23
Security update for Java (important)
2013-03-13 00:05:30
freebsd
freebsd
java 7.x -- security manager bypass
2013-01-10 00:00:00
ubuntucve
ubuntucve
CVE-2012-3174
2013-01-14 00:00:00
CVE-2013-0422
2013-01-10 00:00:00
attackerkb
attackerkb
CVE-2013-0422
2013-01-10 00:00:00
fireeye
fireeye
Internet Explorer 8 Exploit Found in Watering Hole Campaign Targeting Chinese Dissidents
2013-03-20 17:26:00
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON
Related for VERACODE:14288
checkpoint_advisories4securityvulns2threatpost11zdt1ibm7packetstorm1seebug3symantec1thn3saint8canvas1cisa_kev1metasploit1exploitdb1prion2nessus18openvas21redhat3zdi1ubuntu1cert1centos1cve2oraclelinux1fedora3suse2freebsd1ubuntucve2attackerkb1fireeye1securelist1gentoo1