CVE-2019-2996 — Corporation Java vulnerability

6 documents6 sources
Severity
4.2MEDIUMNVD
EPSS
2.2%
top 15.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Netapp E-series Santricity OS ControllerOracle Corporation JavaOracle JDK+7 more
Timeline
PublishedOct 16
Latest updateMay 24

Description

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert o…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:NExploitability: 1.6 | Impact: 2.5

Affected Packages8 packages

▶CVEListV5oracle_corporation/javaJava SE Embedded: 8u221, Java SE: 8u221+1
▶NVDoracle/jdk1.8.0
▶NVDoracle/jre1.8.0

Also affects: Enterprise Linux 8.0, 8.1, 8.6

Patches

Patch: www.oracle.com ↗Patch: access.redhat.com ↗Patch: access.redhat.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-9pp2-vwj5-cwwr: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment)↗2022-05-24
▶
CVEList
CVE-2019-2996: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment)↗2019-10-16
▶

📋Vendor Advisories

2
Red Hat
JDK: unspecified vulnerability fixed in 8u221 (Deployment)↗2019-10-15
▶
Debian
CVE-2019-2996: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon...↗2019
▶

💬Community

1
Bugzilla
CVE-2019-2996 Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment)↗2019-12-02
▶
CVE-2019-2996 — Oracle Corporation Java vulnerability | cvebase