Oracle Java SE and JRockit Unspecified Vulnerability.

Oracle · Java SE and JRockit

Exploitabilité (EPSS)

92.3 %

percentile mondial 100

Sévérité (CVSS)

9.8

CVSS v3.1

Ajoutée au KEV

12 mai 2023

échéance CISA · 02 juin 2023

Description

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

Action requise (CISA)

Apply updates per vendor instructions.

Signal de priorisation (inspiré SSVC)

Examiner rapidement

Exploitation
Active (catalogue KEV)

Automatisable
Inconnu

Impact technique
Total

Orientation, pas une décision : le 4ᵉ facteur SSVC (impact mission/société) dépend du contexte de votre organisation. Méthode ↗

NVD ↗ CVE.org ↗ CISA KEV ↗