CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5238

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to obtain sensitive information (the Java Web Start cache location) via an untrusted application, aka "three vulnerabilities."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.6%

CVSS Severity

CVSS v2 Score 2.6

References

Products affected by CVE-2007-5238

Sun » Jdk » Version: 1.5.0

cpe:2.3:a:sun:jdk:1.5.0
Sun » Jdk » Version: 1.6.0

cpe:2.3:a:sun:jdk:1.6.0
Sun » Jre » Version: 1.3.0

cpe:2.3:a:sun:jre:1.3.0
Sun » Jre » Version: 1.3.1

cpe:2.3:a:sun:jre:1.3.1
Sun » Jre » Version: 1.4

cpe:2.3:a:sun:jre:1.4
Sun » Jre » Version: 1.4.1

cpe:2.3:a:sun:jre:1.4.1
Sun » Jre » Version: 1.4.2

cpe:2.3:a:sun:jre:1.4.2
Sun » Jre » Version: 1.4.2_1

cpe:2.3:a:sun:jre:1.4.2_1
Sun » Jre » Version: 1.4.2_10

cpe:2.3:a:sun:jre:1.4.2_10
Sun » Jre » Version: 1.4.2_11

cpe:2.3:a:sun:jre:1.4.2_11
Sun » Jre » Version: 1.4.2_12

cpe:2.3:a:sun:jre:1.4.2_12
Sun » Jre » Version: 1.4.2_13

cpe:2.3:a:sun:jre:1.4.2_13
Sun » Jre » Version: 1.4.2_14

cpe:2.3:a:sun:jre:1.4.2_14
Sun » Jre » Version: 1.4.2_15

cpe:2.3:a:sun:jre:1.4.2_15
Sun » Jre » Version: 1.4.2_3

cpe:2.3:a:sun:jre:1.4.2_3
Sun » Jre » Version: 1.4.2_8

cpe:2.3:a:sun:jre:1.4.2_8
Sun » Jre » Version: 1.4.2_9

cpe:2.3:a:sun:jre:1.4.2_9
Sun » Jre » Version: 1.5.0

cpe:2.3:a:sun:jre:1.5.0
Sun » Jre » Version: 1.6.0

cpe:2.3:a:sun:jre:1.6.0
Sun » Sdk » Version: 1.3.1_01

cpe:2.3:a:sun:sdk:1.3.1_01
Sun » Sdk » Version: 1.3.1_01a

cpe:2.3:a:sun:sdk:1.3.1_01a
Sun » Sdk » Version: 1.3.1_16

cpe:2.3:a:sun:sdk:1.3.1_16
Sun » Sdk » Version: 1.3.1_18

cpe:2.3:a:sun:sdk:1.3.1_18
Sun » Sdk » Version: 1.3.1_19

cpe:2.3:a:sun:sdk:1.3.1_19
Sun » Sdk » Version: 1.3.1_20

cpe:2.3:a:sun:sdk:1.3.1_20
Sun » Sdk » Version: 1.4.2

cpe:2.3:a:sun:sdk:1.4.2
Sun » Sdk » Version: 1.4.2_03

cpe:2.3:a:sun:sdk:1.4.2_03
Sun » Sdk » Version: 1.4.2_08

cpe:2.3:a:sun:sdk:1.4.2_08
Sun » Sdk » Version: 1.4.2_09

cpe:2.3:a:sun:sdk:1.4.2_09
Sun » Sdk » Version: 1.4.2_10

cpe:2.3:a:sun:sdk:1.4.2_10
Sun » Sdk » Version: 1.4.2_11

cpe:2.3:a:sun:sdk:1.4.2_11
Sun » Sdk » Version: 1.4.2_12

cpe:2.3:a:sun:sdk:1.4.2_12
Sun » Sdk » Version: 1.4.2_13

cpe:2.3:a:sun:sdk:1.4.2_13
Sun » Sdk » Version: 1.4.2_14

cpe:2.3:a:sun:sdk:1.4.2_14
Sun » Sdk » Version: 1.4.2_15

cpe:2.3:a:sun:sdk:1.4.2_15

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-5238

Products

Pricing

Contact Us