CVE-2008-3106
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and...
4.3 Medium
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
Exploit likelihood
3.34%Down 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
- Record
CVE-2008-3106- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
- Record
CVE-2008-3106- Updated
- 2026-11-02
EUVDEUVD-2008-3096 No score
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
- Record
EUVD-2008-3096- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vjpx-8gm7-4pxc No score
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and...
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
- Record
GHSA-vjpx-8gm7-4pxc- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
Show 56 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:network_satellite:5.1::el4 From an advisory covering 17 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.1::el4 From an advisory covering 17 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el4 | 1:1.6.0.2-1jpp.2.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.2-1jpp.2.el5 | 1:1.6.0.2-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3106 is a medium vulnerability (CVSS 4.3) in Sun Jdk, published July 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.34%, the 88th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2008-1044.html
marc.info?l=bugtraq&m=122331139823057&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866
secunia.com/advisories/32436
securitytracker.com/id?1020457
support.avaya.com/elmodocs2/security/ASA-2008-428.htm
Show 130 moreShow less
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
security.gentoo.org/glsa/glsa-200911-02.xml
vupen.com/english/advisories/2008/2740
lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717
vmware.com/security/advisories/VMSA-2008-0016.html
securityfocus.com/bid/30143
sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1
us-cert.gov/cas/techalerts/TA08-193A.html
support.apple.com/kb/HT3179
exchange.xforce.ibmcloud.com/vulnerabilities/43658
nvd.nist.gov/vuln/detail/CVE-2008-3106
github.com/advisories/GHSA-vjpx-8gm7-4pxc
access.redhat.com/errata/RHSA-2008:0594
bugzilla.redhat.com/show_bug.cgi?id=452649
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0594.json
cve.org/CVERecord?id=CVE-2008-3103
www-128.ibm.com/developerworks/java/jdk/alerts