CVE-2008-4747
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows...
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.
Exploit likelihood
What each source reports
NVD Score used
2.1
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.
- Record
CVE-2008-4747- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.
- Record
CVE-2008-4747- Updated
- 2026-11-02
EUVDEUVD-2008-4727 No score
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.
- Record
EUVD-2008-4727- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qvx7-xchc-8mqc No score
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows...
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vectors related to the LDAP JDK library.
- Record
GHSA-qvx7-xchc-8mqc- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4747 is a low vulnerability (CVSS 2.1) in Sun Java Access Manager, published October 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
vupen.com/english/advisories/2008/2916
securityfocus.com/bid/31905
secunia.com/advisories/32327
securitytracker.com/id?1021103
exchange.xforce.ibmcloud.com/vulnerabilities/46074
sunsolve.sun.com/search/document.do?assetkey=1-26-242246-1
nvd.nist.gov/vuln/detail/CVE-2008-4747
github.com/advisories/GHSA-qvx7-xchc-8mqc