Lucene search

[email protected]CVE-2010-3573

HistoryOct 19, 2010 - 10:00 p.m.

CVE-2010-3573

2010-10-1922:00:03

[email protected]

web.nvd.nist.gov

oracle

java

business

remote

vulnerability

confidentiality

integrity

availability

cve-2010-3573

nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

High

EPSS

0.296

Percentile

96.9%

JSON

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.

Affected configurations

NVD

Node

sunjreRange≤1.6.0update_21

sunjreMatch1.6.0

sunjreMatch1.6.0update_1

sunjreMatch1.6.0update_10

sunjreMatch1.6.0update_11

sunjreMatch1.6.0update_12

sunjreMatch1.6.0update_13

sunjreMatch1.6.0update_14

sunjreMatch1.6.0update_15

sunjreMatch1.6.0update_16

sunjreMatch1.6.0update_17

sunjreMatch1.6.0update_18

sunjreMatch1.6.0update_19

sunjreMatch1.6.0update_2

sunjreMatch1.6.0update_20

sunjreMatch1.6.0update_3

sunjreMatch1.6.0update_4

sunjreMatch1.6.0update_5

sunjreMatch1.6.0update_6

sunjreMatch1.6.0update_7

Node

sunjdkRange≤1.6.0update_21

sunjdkMatch1.6.0

sunjdkMatch1.6.0update_10

sunjdkMatch1.6.0update_11

sunjdkMatch1.6.0update_12

sunjdkMatch1.6.0update_13

sunjdkMatch1.6.0update_14

sunjdkMatch1.6.0update_15

sunjdkMatch1.6.0update_16

sunjdkMatch1.6.0update_17

sunjdkMatch1.6.0update_18

sunjdkMatch1.6.0update_19

sunjdkMatch1.6.0update_20

sunjdkMatch1.6.0update_3

sunjdkMatch1.6.0update_4

sunjdkMatch1.6.0update_5

sunjdkMatch1.6.0update_6

sunjdkMatch1.6.0update_7

sunjdkMatch1.6.0update1

sunjdkMatch1.6.0update1_b06

sunjdkMatch1.6.0update2

Node

sunjdkRange≤1.5.0update25

sunjdkMatch1.5.0

sunjdkMatch1.5.0update1

sunjdkMatch1.5.0update10

sunjdkMatch1.5.0update11

sunjdkMatch1.5.0update12

sunjdkMatch1.5.0update13

sunjdkMatch1.5.0update14

sunjdkMatch1.5.0update15

sunjdkMatch1.5.0update16

sunjdkMatch1.5.0update17

sunjdkMatch1.5.0update18

sunjdkMatch1.5.0update19

sunjdkMatch1.5.0update2

sunjdkMatch1.5.0update20

sunjdkMatch1.5.0update21

sunjdkMatch1.5.0update22

sunjdkMatch1.5.0update23

sunjdkMatch1.5.0update24

sunjdkMatch1.5.0update3

sunjdkMatch1.5.0update4

sunjdkMatch1.5.0update5

sunjdkMatch1.5.0update6

sunjdkMatch1.5.0update7

sunjdkMatch1.5.0update8

sunjdkMatch1.5.0update9

Node

sunjreRange≤1.5.0update25

sunjreMatch1.5.0

sunjreMatch1.5.0update1

sunjreMatch1.5.0update10

sunjreMatch1.5.0update11

sunjreMatch1.5.0update12

sunjreMatch1.5.0update13

sunjreMatch1.5.0update14

sunjreMatch1.5.0update15

sunjreMatch1.5.0update16

sunjreMatch1.5.0update17

sunjreMatch1.5.0update18

sunjreMatch1.5.0update19

sunjreMatch1.5.0update2

sunjreMatch1.5.0update20

sunjreMatch1.5.0update21

sunjreMatch1.5.0update22

sunjreMatch1.5.0update23

sunjreMatch1.5.0update24

sunjreMatch1.5.0update3

sunjreMatch1.5.0update4

sunjreMatch1.5.0update5

sunjreMatch1.5.0update6

sunjreMatch1.5.0update7

sunjreMatch1.5.0update8

sunjreMatch1.5.0update9

VendorProductVersionCPE
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_10::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_5::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_11::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_7::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_6::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_15::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_19::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_18::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_12::
sunjre1.6.0cpe:/a:sun:jre:1.6.0:update_2::

Vendor	Product	Version	CPE
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_10::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_5::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_11::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_7::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_6::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_15::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_19::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_18::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_12::
sun	jre	1.6.0	cpe:/a:sun:jre:1.6.0:update_2::