Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45220
HistoryJan 30, 2024 - 6:27 p.m.

Unauthorized Data Manipulation

2024-01-3018:27:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
oracle
java se
data manipulation
vulnerability
hotspot component
untrusted
java web start
java applets

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.5

Confidence

Low

Oracle Java SE is vulnerable to Unauthorized Data Manipulation attack. The vulnerability is due to improper handling of data supplied to APIs in the Hotspot component without using untrusted Java Web Start applications or untrusted Java applets, which allows an unauthenticated attacker with network access via multiple protocols to compromise the affected Oracle products and potentially create, delete, or modify critical data.

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.5

Confidence

Low