Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2019-2449

Quick assessment

Affected

Oracle Corporation Java

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。 Oracle Java SE 8u192版本中的Deployment子组件中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。

AI Predicted 3.1 Difficulty: Hard EPSS 2.98% · P87 Updated Feb 23, 2026

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-2449

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Oracle Java SE 访问控制错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Oracle Corporation	Java	Java SE: 8u192	-

II. Public POCs for CVE-2019-2449

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2019-2449

请登录查看更多情报信息。

Vendor Advisories for CVE-2019-2449 (7)

http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20190118-0001/ x_refsource_CONFIRM
http://www.securityfocus.com/bid/106597 vdb-entry x_refsource_BID
https://access.redhat.com/errata/RHSA-2019:0469 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1238 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:0640 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:0472 vendor-advisory x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2019-2449

Same Patch Batch · Oracle Corporation · 2019-01-16 · 155 CVEs total

CVE-2019-2502		Oracle MySQL Server 访问控制错误漏洞
CVE-2019-2493		Oracle PeopleSoft Products PeopleSoft Enterprise CS Campus Community 访问控制错误漏洞
CVE-2019-2494		Oracle MySQL Server 访问控制错误漏洞
CVE-2019-2495		Oracle MySQL Server 访问控制错误漏洞
CVE-2019-2496		Oracle E-Business Suite CRM Technical Foundation 访问控制错误漏洞
CVE-2019-2497		Oracle E-Business Suite CRM Technical Foundation 访问控制错误漏洞
CVE-2019-2498		Oracle E-Business Suite Partner Management 访问控制错误漏洞
CVE-2019-2499		Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools 访问控制错误漏洞
CVE-2019-2500		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2501		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2507		Oracle MySQL Server 访问控制错误漏洞
CVE-2019-2511		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2510		Oracle MySQL Server 访问控制错误漏洞
CVE-2019-2509		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2508		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2505		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2503		Oracle MySQL Server 访问控制错误漏洞
CVE-2019-2504		Oracle Virtualization VM VirtualBox 访问控制错误漏洞
CVE-2019-2492		Oracle E-Business Suite Email Center 访问控制错误漏洞
CVE-2019-2506		Oracle Virtualization VM VirtualBox 访问控制错误漏洞

Showing top 20 of 155 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Java

Same vendor: Oracle Corporation

V. Comments for CVE-2019-2449

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2019-2449

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2019-2449

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2019-2449

III. Intelligence Information for CVE-2019-2449

Vendor Advisories for CVE-2019-2449 (7)

Same Patch Batch · Oracle Corporation · 2019-01-16 · 155 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2019-2449

Leave a comment