CVE-2010-0886
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for...
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
10.0
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
CVE-2010-0886- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
CVE-2010-0886- Updated
- 2026-11-02
EUVDEUVD-2010-0911 No score
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
EUVD-2010-0911- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8wr7-r8m6-cw65 No score
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for...
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- Record
GHSA-8wr7-r8m6-cw65- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el4 | 1:1.6.0.20-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
Show 8 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 2 CVEs |
before 1:1.6.0.20-1jpp.1.el5 | 1:1.6.0.20-1jpp.1.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Java Deployment Toolkit - Performs Insufficient Validation of Parameters | 2010-04-09 |
| Exploit-DB | JAVA Web Start - Arbitrary Command-Line Injection | 2010-04-09 |
| Exploit-DB | Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit) | 2010-04-09 |
| Metasploit | Sun Java Web Start Plugin Command Line Argument Injection | 2010-04-09 |
| Exploit-DB | Sun Java - Web Start Plugin Command Line Argument Injection (Metasploit) | 2010-09-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0886 is a high vulnerability (CVSS 10.0) in Sun Jdk, published April 20, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 69.9%, the 99th percentile. No source names a fixed version.
References
lists.apple.com/archives/security-announce/2010//May/msg00001.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14216
marc.info?l=bugtraq&m=134254866602253&w=2
secunia.com/advisories/39819
lists.apple.com/archives/security-announce/2010//May/msg00002.html
sunsolve.sun.com/search/document.do?assetkey=1-66-279590-1
Show 19 moreShow less
support.apple.com/kb/HT4170
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
sunsolve.sun.com/search/document.do?assetkey=1-77-1022294.1-1
oracle.com/technology/deploy/security/alerts/alert-cve-2010-0886.html
vmware.com/security/advisories/VMSA-2011-0003.html
support.apple.com/kb/HT4171
securityfocus.com/archive/1/516397/100/0/threaded
vupen.com/english/advisories/2010/1191
nvd.nist.gov/vuln/detail/CVE-2010-0886
github.com/advisories/GHSA-8wr7-r8m6-cw65
access.redhat.com/errata/RHSA-2010:0356
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=581237
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0356.json
access.redhat.com/security/cve/CVE-2010-0886
cve.org/CVERecord?id=CVE-2010-0886
access.redhat.com/security/cve/CVE-2010-0887
cve.org/CVERecord?id=CVE-2010-0887
nvd.nist.gov/vuln/detail/CVE-2010-0887