Vulnerability in Oracle Jdk

CVE-2011-3547

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.

EPSS: 0.027 (84.3th percentile) — read the EPSS interpretation.

Affected products

  • Oracle Jdk — versions 1.6.0, 1.7.0
  • Oracle Jre — versions 1.6.0, 1.7.0
  • Sun Jdk — versions 1.6.0, 1.5.0, 1.4.2
  • Sun Jre — versions 1.6.0, 1.5.0, 1.4.2_1
  • N/a — versions n/a

References