Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Java JDK/JRE Java插件 跨站脚本攻击漏洞
Vulnerability Description
Solaris系统的Java运行时环境(JRE)为JAVA应用程序提供可靠的运行环境。 Sun Java JDK/JRE Java插件 存在跨站脚本攻击漏洞，没有阻止从本地和系统其它端口加载javascript脚本，本地或远程攻击者通过LiveConnect绕过访问限制。
CVSS Information
N/A
Vulnerability Type
N/A