CVE-2005-0836

VendorsunProductj2seDiscoveredMay 2, 2005UpdatedApr 16, 2026

Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.

View graph Watch Export

CVSS v3.1

—

EPSS

2.93%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

1 relationships

j2se

source

Timeline

disclosure → media coverage

May 2, 2005

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026