Lucene search

OracleCVE-2019-2958

HistoryOct 16, 2019 - 6:15 p.m.

CVE-2019-2958

2019-10-1618:15:30

oracle

web.nvd.nist.gov

210

cve-2019-2958

oracle

java se

java se embedded

vulnerability

network access

security

cvss 3.0

integrity impact

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

Confidence

High

EPSS

0.004

Percentile

73.3%

JSON

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

Affected configurations

Nvd

Vulners

Node

oraclejdkMatch1.7.0update231

oraclejdkMatch1.8.0update221

oraclejdkMatch11.0.4

oraclejdkMatch13.0.0

oraclejreMatch1.7.0update231

oraclejreMatch1.8.0update221

oraclejreMatch11.0.4

oraclejreMatch13.0.0

Node

netappe-series_santricity_os_controllerRange11.0.0–11.50.2

netappe-series_santricity_storage_managerMatch-

netappe-series_santricity_unified_managerMatch-

netappe-series_santricity_web_services_proxyMatch-

netapponcommand_workflow_automationMatch-

netappsnapmanagerMatch-oracle

netappsnapmanagerMatch-sap

Node

opensuseleapMatch15.0

opensuseleapMatch15.1

Node

debiandebian_linuxMatch8.0

VendorProductVersionCPE
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update231:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update221:*:*:*:*:*:*
oraclejdk11.0.4cpe:2.3:a:oracle:jdk:11.0.4:*:*:*:*:*:*:*
oraclejdk13.0.0cpe:2.3:a:oracle:jdk:13.0.0:*:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*
oraclejre11.0.4cpe:2.3:a:oracle:jre:11.0.4:*:*:*:*:*:*:*
oraclejre13.0.0cpe:2.3:a:oracle:jre:13.0.0:*:*:*:*:*:*:*
netappe-series_santricity_os_controller*cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
netappe-series_santricity_storage_manager-cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update231::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update221::::::
oracle	jdk	11.0.4	cpe:2.3:a:oracle:jdk:11.0.4:::::::*
oracle	jdk	13.0.0	cpe:2.3:a:oracle:jdk:13.0.0:::::::*
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update231::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update221::::::
oracle	jre	11.0.4	cpe:2.3:a:oracle:jre:11.0.4:::::::*
oracle	jre	13.0.0	cpe:2.3:a:oracle:jre:13.0.0:::::::*
netapp	e-series_santricity_os_controller	*	cpe:2.3:a:netapp:e-series_santricity_os_controller::::::::
netapp	e-series_santricity_storage_manager	-	cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:::::::*

Rows per page:

1-10 of 181

CNA Affected

[
  {
    "product": "Java",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Java SE: 7u231, 8u221, 11.0.4, 13"
      },
      {
        "status": "affected",
        "version": "Java SE Embedded: 8u221"
      }
    ]
  }
]