CVE-2005-3904
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1...
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
Exploit likelihood
What each source reports
NVD Score used
7.5
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
- Record
CVE-2005-3904- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
- Record
CVE-2005-3904- Updated
- 2026-11-02
EUVDEUVD-2005-3899 No score
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
- Record
EUVD-2005-3899- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8qg-vjh8-h4m5 No score
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1...
Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
- Record
GHSA-r8qg-vjh8-h4m5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3904 is a high vulnerability (CVSS 7.5) in Sun Jdk, published November 30, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.17%, the 92nd percentile. No source names a fixed version.
References
secunia.com/advisories/17847
secunia.com/advisories/18503
securityfocus.com/bid/15615
vupen.com/english/advisories/2005/2946
vupen.com/english/advisories/2005/2675
www-1.ibm.com/support/docview.wss?uid=swg21225628
Show 10 moreShow less
vupen.com/english/advisories/2005/2636
sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1
kb.cert.org/vuls/id/931684
lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
securitytracker.com/id?1015281
exchange.xforce.ibmcloud.com/vulnerabilities/23252
secunia.com/advisories/17748
secunia.com/advisories/18092
nvd.nist.gov/vuln/detail/CVE-2005-3904
github.com/advisories/GHSA-r8qg-vjh8-h4m5