CVE-2010-4470
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for...
5.0 Medium
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
Exploit likelihood
3.48%Down 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
- Record
CVE-2010-4470- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
- Record
CVE-2010-4470- Updated
- 2026-11-02
EUVDEUVD-2010-4439 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
- Record
EUVD-2010-4439- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rgfv-57h2-99r6 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for...
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to "Features set on SchemaFactory not inherited by Validator."
- Record
GHSA-rgfv-57h2-99r6- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:5.0 From an advisory covering 10 CVEs |
before 6b18-1.8.7-2~lenny1, plus listed versions 6b11-9.16b11-9.1+lenny26b12-06b12-1~exp16b12~pre1-0 Show 44 moreShow less6b12~pre2-16b14-1.5~pre1-16b14-1.5~pre1-26b14-1.5~pre1-36b14-1.5~pre1-46b14-1.5~pre1-56b14-1~exp16b16-16b16-1.6-16b16-1.6.1-16b16-1.6.1-26b16-1.6~pre2-16b16-26b16-36b16-46b17-1.7-16b17-1.7-1+sh4.16b17~pre3-16b17~pre3-1+sh46b17~pre3-1+sh4.16b18-1.8-16b18-1.8-26b18-1.8-36b18-1.8-46b18-1.8.1-16b18-1.8.1-26b18-1.8.2-16b18-1.8.2-26b18-1.8.2-36b18-1.8.2-46b18-1.8.3-16b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.3-2~lenny16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18~pre1-16b18~pre1-26b18~pre1-36b18~pre1-46b18~pre2-16b18~pre3-16b18~pre4-1 |
6b18-1.8.7-2~lenny1 |
openjdk-6Debian:6.0 From an advisory covering 10 CVEs |
before 6b18-1.8.7-2~squeeze1, plus listed versions 6b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-2~lenny1 |
6b18-1.8.7-2~squeeze1 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4470 is a medium vulnerability (CVSS 5.0) in Sun Jre, published February 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. No source names a fixed version.
References
hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html
oracle.com/technetwork/topics/security/cpuapr2011-301950.html
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
securityfocus.com/bid/46387
Show 97 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/65404
secunia.com/advisories/43350
redhat.com/support/errata/RHSA-2011-0282.html
debian.org/security/2011/dsa-2224
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14076
mandriva.com/security/advisories?name=MDVSA-2011:054
nvd.nist.gov/vuln/detail/CVE-2010-4470
github.com/advisories/GHSA-rgfv-57h2-99r6
access.redhat.com/errata/RHSA-2011:0281
bugzilla.redhat.com/show_bug.cgi?id=675942
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0281.json
cve.org/CVERecord?id=CVE-2010-4448