Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to cross-site scripting (XSS) in the sun.rmi.transport.proxy CGIHandler class that does not properly handle error messages in a (1) command or (2) port number.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Java SE JRE组件未明安全漏洞
Vulnerability Description
Oracle Java SE是美国甲骨文(Oracle)公司的一套标准版Java平台,用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。 Oracle Java SE 7至Update 11版本,6至Update 38版本,5.0至Update 38版本以及1.4.2_40和较早版本中的Java Runtime Environment (JRE)组件中存在未明安全漏洞。通过与RMI相关的向量,远程攻击者利用该漏洞影响完整性。
CVSS Information
N/A
Vulnerability Type
N/A