Approved changes feed: RSS · Atom

cpe:2.3:a:sun:java_se:*:20:*:*:*:*:*:*

part: a version: * update: 20

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJava Se (c4f750a4-daac-52c8-ad0d-9dfa121b87b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2689 vulnerable 2026-06-08 04:51:30.010933 Details available
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.
Published: 2009-08-10T18:00:00.000Z
Updated: 2024-08-07T05:59:56.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2475 vulnerable 2026-06-08 04:51:28.785432 Details available
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.
Published: 2009-08-10T18:00:00.000Z
Updated: 2024-08-07T05:52:14.899Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.