CVE-2011-2513

VendorredhatProducticedtea6, icedtea-webDiscoveredMay 14, 2014UpdatedMay 6, 2026

The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the username and full path of the home and cache directories by accessing properties of the ClassLoader.

View graph Watch Export

CVSS v3.1

—

EPSS

2.50%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

3 relationships

CWE-200

source

Timeline

disclosure → media coverage

May 14, 2014

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026