Approved changes feed: RSS · Atom
cpe:2.3:a:sun:jre:*:update3:*:*:*:*:*:*
part: a version: * update: update3
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Jre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-0628 |
vulnerable | 2026-06-08 04:50:17.330544 |
Details available
The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.
Published: 2008-02-06T20:00:00.000Z
Updated: 2024-08-07T07:54:22.701Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0896 |
vulnerable | 2026-06-08 04:47:22.804951 |
Details available
The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.818Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.