CVE-2017-10105

6 documents6 sources
Severity
4.3MEDIUM
EPSS
0.5%
top 34.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
Netapp E-series Santricity OS ControllerNetapp Oncommand Unified ManagerOracle Corporation Java+11 more
Timeline
PublishedAug 8
Latest updateMay 13

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessi…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages13 packages

▶CVEListV5oracle_corporation/java7u141, 8u131, Java SE: 6u151+2
▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2

Also affects: Enterprise Linux 7.5

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4v4c-962p-vm5x: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)↗2022-05-13
▶
CVEList
CVE-2017-10105: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)↗2017-08-08
▶

📋Vendor Advisories

2
Red Hat
JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)↗2017-07-18
▶
Debian
CVE-2017-10105: openjdk-8 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployme...↗2017
▶

💬Community

1
Bugzilla
CVE-2017-10105 Oracle JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)↗2017-07-19
▶
CVE-2017-10105 (MEDIUM CVSS 4.3) | Vulnerability in the Java SE compon | cvebase.io