Every CVESearch/Get API key

CVE-2002-2284

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute...

6.4 Medium

CVE-2002-2284 is a medium vulnerability (CVSS 6.4) in Netscape Communicator, published December 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.

What does this mean?
Severity
6.4 MediumCVSS 2.0, NVD
Exploit chance
2.04%EPSS, 81st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.

Exploit likelihood

2.04%Up 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.4

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.

Record
CVE-2002-2284
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:P/A:N
Updated
2026-11-02
CVE ListNo score

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.

Record
CVE-2002-2284
Updated
2026-11-02
EUVDEUVD-2002-2262No score

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.

Record
EUVD-2002-2262
Updated
2026-11-03
GitHub AdvisoriesGHSA-3g69-x92x-w37wNo score

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute...

Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.

Record
GHSA-3g69-x92x-w37w
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open