Search/CVE-2006-4302
● CVE

CVE-2006-4302

VendorsunProductjava web start, j2seDiscoveredAug 23, 2006UpdatedApr 16, 2026

The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities.

CVSS v3.1
—
EPSS
4.03%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 21, 2026
▲ 0.07pp
3.96% → 4.03% over 2 tracked changes
Connections
3 relationships
Timeline
disclosure → media coverage
Aug 23, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026