Search/CVE-2019-2602
● CVE — High

CVE-2019-2602

Vendordebian, oracle, canonical, redhat, opensuseProductdebian linux, jre, ubuntu linux, enterprise linux, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, openshift container platform, leap, enterprise linux desktop, enterprise linux workstation, satellite, xp7 command view, jdk, epolicy orchestratorDiscoveredApr 23, 2019UpdatedNov 21, 2024

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector:…

CVSS v3.1
7.5 HIGH
EPSS
4.41%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
disclosure → media coverage
Apr 23, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024