CVE-2018-2569

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition (subcomponent: Installer)

published January 18, 2018

CVSS
—
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition (subcomponent: Installer). The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java ME SDK. Note: This applies to the Windows platform only. CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00536 · 44.4th percentile
Published
2018-01-18T02:00Z
EPSS history
Timeline
  • 18 JAN 02:00Z
    Vulnerability in the Java ME SDK component of Oracle Java Micro Edition (subcomponent: Installer)
    cvelistv5