Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44175
HistoryNov 07, 2023 - 7:47 a.m.

Unauthorized Data Access

2023-11-0707:47:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
data access
oracle
java sandbox
vulnerability
authentication
untrusted code

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.6%

Oracle Java SE is vulnerable to Unauthorized Data Access. The vulnerability is due to the lack of proper authentication measures and due to running untrusted code that rely on Java sandbox for security. This results in unauthorized creation, deletion, or modification access to critical data or all Oracle Java SE accessible data. This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets.

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.6%