CVE-2009-2672
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before...
7.5 High
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
Exploit likelihood
4.56%Up 0.2 points since Feb 4, 2022
What each source reports
NVD Score used
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
- Record
CVE-2009-2672- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
- Record
CVE-2009-2672- Updated
- 2026-11-02
EUVDEUVD-2009-2665 No score
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
- Record
EUVD-2009-2665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fj22-5g9h-44w5 No score
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before...
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
- Record
GHSA-fj22-5g9h-44w5- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el4 | 0:1.5.0.20-1jpp.1.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el4 | 0:1.5.0.20-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el4 | 0:1.5.0.20-1jpp.1.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el4 | 0:1.5.0.20-1jpp.1.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el4 | 0:1.5.0.20-1jpp.1.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el4 | 0:1.5.0.20-1jpp.1.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
Show 90 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 0:1.5.0.20-1jpp.1.el5 | 0:1.5.0.20-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el4 | 1:1.5.0.10-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 1:1.5.0.10-1jpp.4.el5 | 1:1.5.0.10-1jpp.4.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el4 | 1:1.6.0.6-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 1:1.6.0.6-1jpp.3.el5 | 1:1.6.0.6-1jpp.3.el5 |
java-1.5.0-sunRed Hat:network_satellite:5.1::el4 From an advisory covering 32 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:network_satellite:5.1::el4 From an advisory covering 32 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2672 is a high vulnerability (CVSS 7.5) in Sun Jdk, published August 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.56%, the 91st percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2009-1200.html
vupen.com/english/advisories/2009/2543
secunia.com/advisories/37460
security.gentoo.org/glsa/glsa-200911-02.xml
vmware.com/security/advisories/VMSA-2009-0016.html
Show 194 moreShow less
marc.info?l=bugtraq&m=125787273209737&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7723
java.sun.com/javase/6/webnotes/6u15.html
securityfocus.com/archive/1/507985/100/0/threaded
us-cert.gov/cas/techalerts/TA09-294A.html
exchange.xforce.ibmcloud.com/vulnerabilities/52337
oracle.com/technetwork/topics/security/cpuoct2009-096303.html
sunsolve.sun.com/search/document.do?assetkey=1-21-125136-16-1
securitytracker.com/id?1022659
lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
nvd.nist.gov/vuln/detail/CVE-2009-2672
github.com/advisories/GHSA-fj22-5g9h-44w5
access.redhat.com/errata/RHSA-2009:1199
blogs.sun.com/security/entry/advance_notification_of_security_updates5
bugzilla.redhat.com/show_bug.cgi?id=512896
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1199.json
cve.org/CVERecord?id=CVE-2009-2475
ibm.com/developerworks/java/jdk/alerts
redhat.com/security/updates/classification
This page doesn't list everything
Left out here: 78 references. The JSON record has them.