Vulnerability in Sun Jdk
CVE-2010-4470
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
EPSS: 0.035 (87.9th percentile) — read the EPSS interpretation.
Affected products
References
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (vendor-advisory, x_refsource_FEDORA)
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (vendor-advisory, x_refsource_GENTOO)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory)
- secalert_us@oracle.com (vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (vendor-advisory, x_refsource_FEDORA)
- secalert_us@oracle.com (vdb-entry, x_refsource_XF)
- secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)