Sun Java Enterprise System vulnerabilities

3 vulnerabilities

Known vulnerabilities in Sun Java Enterprise System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2007-2435sunjava_enterprise_system+2
EPSS score
4.96%
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to support for JNLP files.7.5CVE-2004-0826hphp-ux+8
EPSS score
22.53%
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.7.8CVE-2006-3127sunjava_enterprise_system+1
EPSS score
3.16%
Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations.