CVE-2009-2690 PUBLISHED CVSS 5 MEDIUM

The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted (1) applet or (2) application.

EPSS 4.37% · 88.9th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
4.37%
88.9th percentile

Affected Products

VendorProductVersions
sunjava_se0
sunopenjdk
n/an/an/a

Timeline

References

Open in Interactive Console →