CVE-2017-10309

Risk Scores

Exploit Intelligence

• https://www.exploit-db.com/exploits/43103/ (nist-nvd)
• Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure Exploit (0day-today)
• Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure Exploit (0day-today)

Timeline

• Oct 18, 2017 CVE Published
• Oct 31, 2017 PoC Published
• Apr 14, 2021 EPSS Score
• Jun 23, 2021 EPSS Score
• Aug 24, 2021 EPSS Score
• Dec 27, 2021 EPSS Score
• Feb 4, 2022 EPSS Score
• Feb 28, 2022 EPSS Score
• May 2, 2022 EPSS Score
• Jul 3, 2022 EPSS Score
• Sep 5, 2022 EPSS Score
• Jan 8, 2023 EPSS Score

References

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html#AppendixJAVA advisory