CVE-2004-0723

3 documents3 sources
Severity
6.4MEDIUM
EPSS
3.6%
top 12.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Java Virtual Machine
Timeline
PublishedJul 27
Latest updateApr 29

Description

Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-4gr5-3999-978f: Microsoft Java virtual machine (VM) 5↗2022-04-29
▶
CVEList
CVE-2004-0723: Microsoft Java virtual machine (VM) 5↗2004-07-23
▶
CVE-2004-0723 (MEDIUM CVSS 6.4) | Microsoft Java virtual machine (VM) | cvebase.io