CVE-2009-2689 PUBLISHED CVSS 10 CRITICAL

JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.

EPSS 7.51% · 91.7th percentile

Risk Scores

CVSS v2.0
10
EPSS Score
7.51%
91.7th percentile

Affected Products

VendorProductVersions
sunopenjdk
n/an/an/a
sunjava_se0, 0

Timeline

References

Open in Interactive Console →