CVE-2010-4472 — JDK vulnerability
8 documents6 sources
Severity
2.6LOWNVD
EPSS
6.9%
top 8.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 17
Latest updateMay 17
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the "XML DSig Transform or C14N algorithm implementations."
CVSS vector
AV:N/AC:H/C:N/I:N/A:PExploitability: 4.9 | Impact: 2.9
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-2qxc-rxrw-rpvh: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attacker↗2022-05-17
CVEList▶
CVE-2010-4472: Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attacker↗2011-02-17
📋Vendor Advisories
4💬Community
1Bugzilla▶
CVE-2010-4472 OpenJDK untrusted code allowed to replace DSIG/C14N implementation (6994263)↗2011-02-08